9a9791f1d1b7f09ea00adfe2f6db38a4340b68df3678a881bdc8ab97e5fedc65

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
13/11/2026, 14:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.js
Size 15KB
Sample261113-rn3x7acw21
SHA256 9a9791f1d1b7f09ea00adfe2f6db38a4340b68df3678a881bdc8ab97e5fedc65
MD5 b6ae098c2bc565aba9f85a6d93ba7757
SHA1 d056698fe62a1f02c3995a1843b35bc16695c630
SHA512 55459a310fadb43ffaaa75d1552c05ff447b07363bfda04124182f3974761a6c6dddd9456245ac909d67774f8fcce3cf1434237090f2bb437fe1689218d87753
SSDEEP 192:xunDxONl9KoI7etCYpkxp7VuO6Eef7PDHkEzJyNPXVGT6SClvqlhGASS7nxmiSqz:xEzz7VuLxurgxjHjVHDdb
TLSH
T1CD72A7468CAA38221213316E93FB9254F999D427C609DC45B8FF43845FB0F524DBBE5A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution persistence

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3236	chrome.exe

Checks processor information in registry 2 TTPs 24 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
4896	chrome.exe
4896	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe
Token: SeShutdownPrivilege	2416	chrome.exe
Token: SeCreatePagefilePrivilege	2416	chrome.exe

Suspicious use of FindShellTrayWindow 39 IoCs

pid	Process
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
5816	firefox.exe
5816	firefox.exe
5816	firefox.exe
5816	firefox.exe
5816	firefox.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe
2416	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5816	firefox.exe

Suspicious use of WriteProcessMemory 61 IoCs

description	pid	Process	procid_target
PID 2416 wrote to memory of 4680	2416	chrome.exe	82
PID 2416 wrote to memory of 3024	2416	chrome.exe	83
PID 2416 wrote to memory of 3024	2416	chrome.exe	83
PID 2416 wrote to memory of 3236	2416	chrome.exe	84
PID 2416 wrote to memory of 4356	2416	chrome.exe	85
PID 2416 wrote to memory of 4356	2416	chrome.exe	85
PID 2416 wrote to memory of 1028	2416	chrome.exe	87
PID 2416 wrote to memory of 3356	2416	chrome.exe	88
PID 2416 wrote to memory of 1028	2416	chrome.exe	87
PID 2416 wrote to memory of 3356	2416	chrome.exe	88
PID 2416 wrote to memory of 2320	2416	chrome.exe	89
PID 2416 wrote to memory of 2320	2416	chrome.exe	89
PID 2416 wrote to memory of 2704	2416	chrome.exe	91
PID 2416 wrote to memory of 2704	2416	chrome.exe	91
PID 2416 wrote to memory of 2064	2416	chrome.exe	92
PID 2416 wrote to memory of 6036	2416	chrome.exe	94
PID 2416 wrote to memory of 5708	2416	chrome.exe	95
PID 2416 wrote to memory of 5728	2416	chrome.exe	96
PID 2416 wrote to memory of 1712	2416	chrome.exe	97
PID 2416 wrote to memory of 1712	2416	chrome.exe	97
PID 6056 wrote to memory of 5816	6056	firefox.exe	99
PID 6056 wrote to memory of 5816	6056	firefox.exe	99
PID 5816 wrote to memory of 3784	5816	firefox.exe	100
PID 5816 wrote to memory of 3784	5816	firefox.exe	100
PID 5816 wrote to memory of 3784	5816	firefox.exe	100
PID 5816 wrote to memory of 3364	5816	firefox.exe	101
PID 5816 wrote to memory of 3364	5816	firefox.exe	101
PID 5816 wrote to memory of 3364	5816	firefox.exe	101
PID 5816 wrote to memory of 3364	5816	firefox.exe	101
PID 5816 wrote to memory of 4520	5816	firefox.exe	102
PID 5816 wrote to memory of 4520	5816	firefox.exe	102
PID 5816 wrote to memory of 4520	5816	firefox.exe	102
PID 5816 wrote to memory of 4520	5816	firefox.exe	102
PID 5816 wrote to memory of 3328	5816	firefox.exe	103
PID 5816 wrote to memory of 3328	5816	firefox.exe	103
PID 5816 wrote to memory of 3328	5816	firefox.exe	103
PID 5816 wrote to memory of 4444	5816	firefox.exe	104
PID 5816 wrote to memory of 4444	5816	firefox.exe	104
PID 5816 wrote to memory of 4444	5816	firefox.exe	104
PID 5816 wrote to memory of 4444	5816	firefox.exe	104
PID 5816 wrote to memory of 1936	5816	firefox.exe	105
PID 5816 wrote to memory of 1936	5816	firefox.exe	105
PID 5816 wrote to memory of 1936	5816	firefox.exe	105
PID 5816 wrote to memory of 1936	5816	firefox.exe	105
PID 5816 wrote to memory of 5928	5816	firefox.exe	106
PID 5816 wrote to memory of 5928	5816	firefox.exe	106
PID 5816 wrote to memory of 5928	5816	firefox.exe	106
PID 5816 wrote to memory of 5928	5816	firefox.exe	106
PID 5816 wrote to memory of 5772	5816	firefox.exe	107
PID 5816 wrote to memory of 5772	5816	firefox.exe	107
PID 5816 wrote to memory of 5772	5816	firefox.exe	107
PID 5816 wrote to memory of 5772	5816	firefox.exe	107
PID 5816 wrote to memory of 5776	5816	firefox.exe	108
PID 5816 wrote to memory of 5776	5816	firefox.exe	108
PID 5816 wrote to memory of 5776	5816	firefox.exe	108
PID 5816 wrote to memory of 5776	5816	firefox.exe	108
PID 5816 wrote to memory of 2284	5816	firefox.exe	109
PID 5816 wrote to memory of 2284	5816	firefox.exe	109
PID 5816 wrote to memory of 2284	5816	firefox.exe	109
PID 5816 wrote to memory of 2284	5816	firefox.exe	109
PID 2416 wrote to memory of 4896	2416	chrome.exe	110

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\sample.js
1⤵
PID:1004

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8cb12c728,0x7ff8cb12c734,0x7ff8cb12c740
  2⤵
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1656,i,11606757277936360627,4393979996192320012,262144 --field-trial-handle=1892,i,4885752944923077353,12258155594092654374,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1904 /prefetch:2
  2⤵
  PID:3024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1472,i,5374212621478120135,7972971234342151364,524288 --field-trial-handle=1892,i,4885752944923077353,12258155594092654374,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2220 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,10066058392411884307,16492275102858966586,524288 --field-trial-handle=1892,i,4885752944923077353,12258155594092654374,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2304 /prefetch:13
  2⤵
  PID:4356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,7875954923840493466,5675552155041632353,2097152 --field-trial-handle=1892,i,4885752944923077353,12258155594092654374,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3264,i,458098825450188413,2980517183009198144,2097152 --field-trial-handle=1892,i,4885752944923077353,12258155594092654374,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4312,i,16420919833031364555,1066949152334439655,2097152 --field-trial-handle=1892,i,4885752944923077353,12258155594092654374,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4328 /prefetch:9
  2⤵
  PID:2320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4736,i,15759289537025415376,9680078619919341744,2097152 --field-trial-handle=1892,i,4885752944923077353,12258155594092654374,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5524,i,14213513881115364837,5457667079968577548,524288 --field-trial-handle=1892,i,4885752944923077353,12258155594092654374,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5528 /prefetch:14
  2⤵
  PID:2064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5560,i,11398418525100086671,13739615537982203733,524288 --field-trial-handle=1892,i,4885752944923077353,12258155594092654374,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5812 /prefetch:14
  2⤵
  PID:6036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5820,i,9576960044480881761,1246643569375969250,524288 --field-trial-handle=1892,i,4885752944923077353,12258155594092654374,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5852 /prefetch:14
  2⤵
  PID:5708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5816,i,16669939287178641909,14471560230051831486,524288 --field-trial-handle=1892,i,4885752944923077353,12258155594092654374,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5876 /prefetch:14
  2⤵
  PID:5728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4420,i,10182303925915819720,16986110440142968355,2097152 --field-trial-handle=1892,i,4885752944923077353,12258155594092654374,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3648,i,7167534894423928338,15253602152491457899,262144 --field-trial-handle=1892,i,4885752944923077353,12258155594092654374,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4612 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4896

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1112

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3912

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:6056
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:5816
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1984 -prefsLen 27097 -prefMapHandle 1988 -prefMapSize 270279 -ipcHandle 2052 -initialChannelId {90ee3639-f70c-4332-977c-e9803ad16dc9} -parentPid 5816 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5816" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:3784
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2432 -prefsLen 27133 -prefMapHandle 2436 -prefMapSize 270279 -ipcHandle 2444 -initialChannelId {6f2d0768-0422-49bc-a114-b9cbb8436f21} -parentPid 5816 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5816" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:3364
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3760 -prefsLen 27323 -prefMapHandle 3764 -prefMapSize 270279 -jsInitHandle 3768 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3776 -initialChannelId {2942dde0-c7cb-4a28-bd8a-50e91c174158} -parentPid 5816 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5816" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4520
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3952 -prefsLen 27323 -prefMapHandle 3956 -prefMapSize 270279 -ipcHandle 4032 -initialChannelId {e35d0202-c113-45a1-aa71-b8045a0bef59} -parentPid 5816 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5816" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3328
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2764 -prefsLen 34822 -prefMapHandle 3232 -prefMapSize 270279 -jsInitHandle 3236 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3148 -initialChannelId {e34dfe9c-dcdf-486a-ae77-d8ba202f19e4} -parentPid 5816 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5816" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4444
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4820 -prefsLen 34929 -prefMapHandle 4824 -prefMapSize 270279 -ipcHandle 4836 -initialChannelId {3a27038f-b6aa-46be-97cf-fcf143fbc289} -parentPid 5816 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5816" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:1936
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5316 -prefsLen 32952 -prefMapHandle 4784 -prefMapSize 270279 -jsInitHandle 5360 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5292 -initialChannelId {ee5f5091-a7ac-44c6-a83b-b2f42c8bec27} -parentPid 5816 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5816" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5928
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5516 -prefsLen 32952 -prefMapHandle 5520 -prefMapSize 270279 -jsInitHandle 5524 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5532 -initialChannelId {a37f807f-bd28-46bb-a696-4cc3ee5422bd} -parentPid 5816 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5816" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5772
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5704 -prefsLen 32952 -prefMapHandle 5708 -prefMapSize 270279 -jsInitHandle 5712 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5720 -initialChannelId {4519b2e0-9c1e-4502-9e8a-e5bc4ff2bf4c} -parentPid 5816 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5816" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5776
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6232 -prefsLen 33031 -prefMapHandle 6236 -prefMapSize 270279 -jsInitHandle 6240 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6248 -initialChannelId {08793ae1-d46c-4d88-9bff-e9c3865bcc71} -parentPid 5816 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5816" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:2284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

548e738e-58e8-4d63-8a4b-e378278034b8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\548e738e-58e8-4d63-8a4b-e378278034b8.tmp
Size 277KB
SHA256 c884ac062bbbc1b9b5665b82f547df2307942b3d9f6ad560eb0b98e21ef27cce
MD5 0e0d5f9c3b8b61d61d07bb8f393de4ca
SHA1 fe3c3ce2efaf483316a096cd68fa157a742c7e74
SHA512 dd8810a337bec6ef31b7bb59a4b57007fed5fd3a9fd390053ea1332cde813821cf20d11b5e0939587084ea1e47a24d53bbd84000080bd9780e55672fa74117aa
SSDEEP 6144:ucN+/TB7yVnDS687EvaAQAmWy+Att4fLJ0L6nGJxi3bzqapJjL:RVn5BvXQXWy+qWXUx8zvpJX
TLSH
T165541270A2B05C6ECBAAF951102C6F544EF4CDC74FCAFA641CF589490496B662D0BEB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3fc33e0d-b3ac-4059-ac58-58dd5a7fe0ba.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\3fc33e0d-b3ac-4059-ac58-58dd5a7fe0ba.tmp
Size 17KB
SHA256 6b7cee8b1a5eb6f1d44c20ace754a545db0a1024ec3af9927adcfd7fb5491934
MD5 6ebf767a844f07086ae64536124c4a52
SHA1 dfdc2ed2621b56af7ab86ee74a08835c5544579a
SHA512 3d3a2843ec32079f785bc015a3dfab1b143f21902675eeccd9fb84c1a22147178feb9f7d146c1c8203d46344ff8432180128aefaab9fd51e9a50a3c74b2f5ee5
SSDEEP 384:Uijon7KxkXqKf/pUZNCgVLH2Hfgsl3i7pLuLceSijXODoL+ErU3pTHGsUXIoi0lA:Uion7KxkXqKf/pUZNCgVLH2HfgsFi7p9
TLSH
T1D1721A677C4C993B0F94C9CCDC2A7E4FADB5024B61E9886483FA5C2A03D5ADB11062F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6293aa9a-ed33-4d2a-8bb1-06a991b44c9a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6293aa9a-ed33-4d2a-8bb1-06a991b44c9a.tmp
Size 13KB
SHA256 e5fac19656fe78870849f40cee890591d9be11df3cc086d0ffc1a85a22c5dbf2
MD5 50c001a2f85a5817e10bec1837b13883
SHA1 41ba2877e9b5a51e6b56945729f2fd67ea946eba
SHA512 9a9cd4bd2db48ddcee542dad9dc94a30263d07775c01a6d62873216efd05dc9f58e2be05157282c11f1116dffe2e4151d2e00d638eafff684f76789c35469057
SSDEEP 192:mRcY6mbmhd6+v7BhtPRp9gW92HNxb+WNn7A828j2aRTa3PVyIsnAUgraJ:mRcY6qk66dTXJwh842Qa5e
TLSH
T15D52B52DA914797B9CDBD62AF9257B63E3F5203160902E88EAFC8D2C15E76CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

641943ff-9c4e-4a73-9699-63908a9a0580.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\641943ff-9c4e-4a73-9699-63908a9a0580.tmp
Size 13KB
SHA256 98029628566ac8dde937830b7946dd10886dc1d73f9a9f8e0000555333f9e37b
MD5 4dcb413d49849ed80bbc20d917c8df35
SHA1 18587b856769e18a47bf28d32e9258e602a33f65
SHA512 8e2bda8dd5cec08bfc114b671b8f9cf41207d3da855e38ca6157b36c5b3901d9e425bcbad88963e5d9da4fdb21926003655fc9665af420961d3f075c053e747e
SSDEEP 192:mRcY6mbmhdXv7BhtPRp9gl92HNxb+WNn7A82nMY5RTa3P8yIsnAUgraJ:mRcY6qk/dTXawh8IYzake
TLSH
T13C52C52DA924797B9CDBC62AF9257B63D3F5203160D02E84EAFC8D2C25E76CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e140158-2aa3-47ee-9901-9a49b972e2bd.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6e140158-2aa3-47ee-9901-9a49b972e2bd.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

84f53d05-23bd-4c23-bfac-ce0ca006ad85.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\84f53d05-23bd-4c23-bfac-ce0ca006ad85.tmp
Size 12KB
SHA256 900db8dfe32e7103a02e5906490af05fec995bab7dffe76090689fa078a60f44
MD5 32f2fcd170f3f1134f718740e33f11a0
SHA1 21996a31410a088a7cfb31c48121bde8aec75c55
SHA512 7804a5192eaaa7240d8990da1127f0cbee3a8c47f01db01f9a939b5fdcc129d9ce7cd183dfd3099dd7077949eaba66895a008b0f0a3a7658c86b36ec5270e349
SSDEEP 192:mRcY6mbmhb+v7BhAPRp2C92Hsb+WNn7A0HRTa31VyIsnAUgtaJ:mRcY6q06d8XFww80paT8
TLSH
T14642C52EAD24787B9CDBC72AFD257A53D7F5202260D42E84DAF88D2C15E76CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

890d386a-62b2-4673-802e-d76cd23c8485.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\890d386a-62b2-4673-802e-d76cd23c8485.tmp
Size 12KB
SHA256 ec9219837a81abef72b1c9d4c67f9549b2163d19483fcc3a0fa9329e99d8250b
MD5 798adc48c6f943b668e61cc62da11781
SHA1 11e7c970aeeb5f73f3838801376b0390c5f4496d
SHA512 a0c8915ceffaaff0f26599ba4ef9a4fdabe3ddd2c8fb775e914bd9c3b09e2b45e95d749fe533964739ee35e6d1b2bd270c9622fe28f11d9c04b87c6c5bbfc0f1
SSDEEP 192:mRcY6mbmhf+v7BhAPRp2C92Hsb+WNn7A0HRTa31VyIsnAUgtaJ:mRcY6qK6d8XFww80paT8
TLSH
T16A42B52DAD24797B9CDBC72AFD257A53D7F5202160C42E84DAF88D2C15E76CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 22KB
SHA256 f2e1cc227d6bbb4192e4a3becdfed971c7fc530d76200e43add11c98cb962c53
MD5 2010fa9fb07541adc78a1ec0a8a4fbbf
SHA1 beee0e080ea6dcc8c0661b66c1baa08e45f4ecb6
SHA512 8b2f045cb5b4d5ad346f6e816aa2566829a4f5f2783ec31d80d46a57de8ac0c3d21fe6e53bcd8e1f38ac17fcd06d12088bc9b43e23b5d1da52d10c6b717b22b3
SSDEEP 192:Y7dOxdOiujDIG2GncdO1dO5MsOb3lkZOMdOkdOG31QNGiuUiu5iuOVOvVO1:sQfuoGQEUMn3lsLP3byQ
TLSH
T1C3B2B0317041B45BBE13C8E6F0692A9E67088A87C516DFBFD8AF75F9D7122C94126332
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 27KB
SHA256 306df54c409c7ea2819d2811fa2784de4ef580870f98e95194ee1bb9af97adb8
MD5 8a62af56d86d17902302a28598bf609f
SHA1 81645ce78df4655cdeb195ae5739f442d8865b40
SHA512 5238c0927342b4e01098deff2a13156dae16036c78564435df1d22540ee1e5d1c88f88f1117088b6dffc65af39f89d1a6716823e42357f2d286ef81b0b5ef405
SSDEEP 384:wVw/L9B19jxiny2HDpGw/SzS2tCuZHLI9MgB:ow/L9z9jxi/z/SzS2tCuZHLI9MC
TLSH
T19DC27247DE903F1A904F898E9D43ED66473EC4235F0B4EDAB0D1913CE3A82C1566FA5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 38KB
SHA256 9ee2fcff6709e4d0d24b09ca0fc56aade12b4961ed9c43fd13b03248bfb57afe
MD5 2f34b630ffe30ba2ff2b91e3f3c322a1
SHA1 b16fd8226bd6bfb08e568f1b1d0a21d60247cefb
SHA512 a014e9acc78d10a0a7a9fbaa29deac6ef17398542d9574b77b40bf446155d210fa43384757e3837da41b025998ebfab4b9b6f094033f9c226392b800df068bce
SSDEEP 768:up/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:NorXfURXiUrmq5YW
TLSH
T11B03950AB22031A107EFA1A5414B020E73366A7DF94791AC78A9D9F22DB4C49717BF7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
Size 45KB
SHA256 df583a3e1a03dd7122c020eea80b2747d9553e4161c22bfe112ff406f9e9b7dc
MD5 c33e55a3e79984d24f3309545701cb1b
SHA1 f86033f1ec21a3b20803a290318a9e7c4caa1de4
SHA512 b10df1049f31086143b07e373f55896851e3297ccaa334e21f37ba2b961067109037862657a17c9e9f4ab08c752704dee0481c757798a727a23f37c0ebe7906a
SSDEEP 768:mUii4ukQxTKf2qj66sTODNnJEdV0rXPygC0:Tii4wTW2qjjsaDNnJ2qXPZp
TLSH
T12B2301EED1BF01804311E0812783E3E0B729B62CDC8A5D98D2A67D9DF6D165CA1C6BDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Size 87KB
SHA256 a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74
MD5 00727d1d5d9c90f7de826f1a4a9cc632
SHA1 ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2
SHA512 69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c
SSDEEP 1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH
TLSH
T15393F8DDB2C6702247A770BA007F510BF236199D684D8450F269D8E9BC78A4E827BF7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 120B
SHA256 74720cf38730201cf7c00cd98e2a702ef19740cc5dbf256a3f0939ceead645d2
MD5 596fefc611a612e0be733c47719d1b81
SHA1 9abafd21fb0c17539019e7845f947e8ec68d0bcb
SHA512 61a38af635eefcb1b4738eb39d70653397a3ed1e7de88a511b420a63d7c037f3a24b093a0f7736cf521d642c093100a65ea5cabdfcc2277ebdcbef83f28f3acb
TLSH
T186B0124170C94681D7E0027113D1145B31760D5D05327F9342C4C0D46C637B04E210D2
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 120B
SHA256 3982adbc0b1c146c14b1ee53aa11650538933ce9bb4a0dd2484537e393b2aa03
MD5 2a3546490603515d936547971a15ff76
SHA1 4edd0305ffa5798aa05984b7254e0c0c50266d60
SHA512 2fa170a12c409182e70cd2e00f53d44d85ff26873387183830a36787fbb1c590577c379465cb14ae49f1399602881cbb4deec8dab1516c6207eb6a6f9adcc74a
TLSH
T14EB0126033C80459CF5301341B532C12F0118A2804A603B342C0A2C05537FD1C361050
MD5 SHA1 SHA512 TLSH

Submit Download

400f8840-6385-459e-8b52-352e7cfe646d.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\400f8840-6385-459e-8b52-352e7cfe646d.tmp
Size 2KB
SHA256 f021de361a32c523f6343a8e64eee37f0ed68e5e5bf95ee7caccbdc2f552d434
MD5 c9f80b0acf0bc3874d40ed2ff6f10ddf
SHA1 a638cf288e4ff321722b85354d1e64f1f1ea36e4
SHA512 ddb1843e44a4024e08b2c0667c4411cc17957658846079b31b115bf1d5e692ffccb4f57685342b0a8386a7f7b4bc142914c6cab18dc998fe7ad06f377c9fcda1
TLSH
T182518DF7D3E48A7E891156F4DB216E2FCE3D0A14121C3C6289E4AE4B53F2872D24178E
MD5 SHA1 SHA512 TLSH

Submit Download

6599b131-1c57-4046-93ba-7736e117dbba.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\6599b131-1c57-4046-93ba-7736e117dbba.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 ff8cfa50972b54b87d098659c72284684a2009f5b61da29caf6f77e4cfbc2dab
MD5 e5436655a28a7ca4d50aed4c047b3f5c
SHA1 201ace92eeea78b3a49f6176b9c4e58e306a1c98
SHA512 c789cbd0c39609ed81cc6737da62eb6f20b63f39c767fd734538b03d39e68225a318ebe6921b623782122da4cddb77dc989a62d7b55eabf21df57f6266d78c9e
TLSH
T1D0B0122CC0425711C09602B02690188C3194AF10B605130142F01D01C8351B1D01B0B4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 aadb73b0519803b0493efda216b702ad17493ee48bfa80aa304fb34abe541b40
MD5 0dcf8cfcd069fa2a28ba2e37995e3f25
SHA1 d86d00a3491ecb3d495947887389a0e57f53233a
SHA512 0e2461495012a05e36a9a4a550ae8bd553dcd550af8b31b13dac548481a4e2568a9195783871bfec60cf58aa1050079809af470ced51e385ee0c2185a4f9123c
TLSH
T1D1B02200C0023323C00303F022A083E83020CF30C203830282F00B22EC3A23382300A0
MD5 SHA1 SHA512 TLSH

Submit Download

c3d0d643-8a77-42f3-b1c1-2c30f8a24df0.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c3d0d643-8a77-42f3-b1c1-2c30f8a24df0.tmp
Size 414B
SHA256 4c64f8fa6359f2f6c6c99bcafa0f86f49713a533522b0fb80433547f37ae45ad
MD5 92d7238b68fdb4d53f2d7e4fb08b5d49
SHA1 49cdc8d3ac7266627d11f7a42890d8e136d84584
SHA512 647d690deeed6d8942a12b0e6a808bfaab63fe7d8b82ffd2e1b000eb0d9b3252d3c68604f35b01406700ba7782ee0ff57a8aa7959fa58d8809582160b4a4acaf
TLSH
T144E02BBDC960ED2B08FC076954540B09E65023672A40854F3B7C950C8FB8A2A458685C
MD5 SHA1 SHA512 TLSH

Submit Download

d707fa1d-320c-4e85-a1f5-ba4c8ad24ef7.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d707fa1d-320c-4e85-a1f5-ba4c8ad24ef7.tmp
Size 13KB
SHA256 eee1d28f2d3bc3c3011b5b19577cd6bb8220f9186ebbaeb98324e355b9bcb627
MD5 7e199e844d66220f6bf797ddd9db569e
SHA1 d6348502f208c0b8f41916420739604bb7eedfb8
SHA512 8d676865ed3b19f1381f6c62df74d0d98ef4281d91590c5bad4e4eab1b5f54ba1949cd1e607a1c2084ae7d63d5ee474c25309b017f794fe580cddbe5ca37ef33
SSDEEP 192:mRcY6mbmhdDv7BhtPRp9gW92HNxb+WNn7A828j2aRTa3PVyIsnAUgraJ:mRcY6qk7dTXJwh842Qa5e
TLSH
T1BB52B52DA914797B9CDBD62AF9257B63E3F5203160902E88EAFC8D2C15E76CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb0a4b3f-ab28-4609-abf4-271a84bfbbbc.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\eb0a4b3f-ab28-4609-abf4-271a84bfbbbc.tmp
Size 12KB
SHA256 87d0650148a750e049d4123a314a96ceae80f03370fa27e8f55b7b82ecbb1e12
MD5 c6a953af25ab7322a766a14465b305d0
SHA1 e059084aa00e5579b0f7587563f3cb4a38916e74
SHA512 c02f2f7ca872eed44a703809b6cd1459dc0967399d26c153668b3530e3a7413afccaf9e39f8a1e476ddba288baf04ded4e5904e818a80ee42678a9bb378c9a1e
SSDEEP 192:mRcY6mbmhd+v7BhAPRp2C92Hsb+WNn7A0SRTa35VyIsnAUgraJ:mRcY6qk6d8XFww80oaPe
TLSH
T1A942C52EA914797BACDBD62AFD257B53D3F5203260C42E44EAF88D2C15E76CC221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3b66e83-e14e-4581-92fe-9bbb29b02b43.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d3b66e83-e14e-4581-92fe-9bbb29b02b43.tmp
Size 276KB
SHA256 d595fca1c378f9c4c3fba9716eda69d4599a49ccc394f6114dd9d4fa88a29b09
MD5 f29e08ebb46b025e23985eb165c0e8fd
SHA1 1f08d3a2528350290bc60b08d9f74d514b6b4387
SHA512 1b55c3a0ed2fb775c0a0977b5cd1f93022f3c2499877869b6c6e1a7784a8f4e6bf8fe4969b271c02c32f17a5242f590a6d4794107bd342ae3bc7a87311ee4681
SSDEEP 6144:uw+/TB7yVnDS687EvaAQAmWy+Att4fLJ0L6nGJxi3bzqapJjL:XVn5BvXQXWy+qWXUx8zvpJX
TLSH
T1E2541270D2B05C2DCBAAF511202C6F549EB4CED64ACAFA601DF5894904D6B662D0FEB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2b9d313-1c86-45be-9197-52724ef5c14b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\e2b9d313-1c86-45be-9197-52724ef5c14b.tmp
Size 130KB
SHA256 1620fc258d2a46267b9f456294cb6311d8cba5e9de4d8bf5cd55d626905c5160
MD5 7f98089a0b234b0165164c6df2451418
SHA1 63b1afd16f99df4780ed11baa2fa32d84ecf859a
SHA512 6dc1cc34277144a8b7124f1574f73c4e09379540216343f903dee13fa5845ecc125de05ae77a49df8e71963417fcd9d13cd8de246ee221637fde651ba22ad292
SSDEEP 3072:RXH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJja:RVt4fLJ0L6nGJxi3bzqapJja
TLSH
T172D302F1D1E06C6ACBF7EE4145796E908E71D5C689C9BE2409FD8C1816CEA344A13EA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5c29bde-4abf-4278-bb3d-037df395ec75.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\e5c29bde-4abf-4278-bb3d-037df395ec75.tmp
Size 276KB
SHA256 e3829e6900745f2f8a38d84d43731e3b46e0b75d1dc7ab451bd2691a0d6af7d5
MD5 2f85927adacdccbf3ee968e32f83d6ba
SHA1 edf59e1b93c4a42dc78da284a9ed0aebddd16099
SHA512 089a31cc706108690e8b1f3b318f6ba856d4ad4924bce90acbcf076bf5cf76a15624d7b78d72e8307fc31655f0292c761341933a27cd10b0b4689466f46bd626
SSDEEP 6144:Nw+/TB7yVnDS687EvaAQAmWy+Att4fLJ0L6nGJxi3bzqapJjL:gVn5BvXQXWy+qWXUx8zvpJX
TLSH
T1C0541270D3B05C6DCBAAF511102C6F549EB4CED24ACAFA601DF6894904D6B662D0FEB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wnd7vig5.default-release\activity-stream.contile.json
Size 4KB
SHA256 945de33f0137c6ce6196b0969979ae9959f99c64cde240b4b71bc58edd63c515
MD5 7a845d5084ed02e3a1f555cc2265c7aa
SHA1 38dad3fac01ba598b475e87161163cdf3a820579
SHA512 7d56c4006c381e12e7289679b573114e0da6373279d22b1707650ebf26b641e353d5c6e38023efe8f4d1f3f9a9cc285ba9b3f61a0c97909f89aa1ecfd6ce76a5
SSDEEP 48:YdbAWreDZ3y5WMCidA4eriocVQPmqp4JsreDZqy5N1fQxykGjy6T+jiRLQFnqhzQ:TrdMD1cPmMq1Qy5T+mR0FnVDMEfvnh
TLSH
T180A1D6DF942044562B34F5E52C5B23BCF023B08698E5CAF8B16A9C6045683EAC1DF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wnd7vig5.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 66deafe478b1cd06f2b2e05ff999d3ecba52ea5fdc741354835e0f4fb30a3ccf
MD5 1ce826676e69c6250c06b31a037b67cd
SHA1 7aa561719e08fe32226c78aa4fc7620842ce7318
SHA512 b990191d76e3ba8d2251e33edcc2ce0b5f8bbe9abc9a0035b87f263907e6e9202cb93f0e046d520870d5e4354e17a68423dc279967bd1ed6ae4884e2f58cb91d
SSDEEP 768:myNAPSi1uHNO/Tov2pc7iRGRG51VAnucvb2lOOr9KZ1:9NcONOU+pc7mGR24nuUbSKD
TLSH
T1B973E8A3E6E9B1FB1BA037DB2C0F795766D10186E74606C8FCE9CD1C818D654023E6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wnd7vig5.default-release\activity-stream.discovery_stream.json
Size 74KB
SHA256 55cd732d49ea239f1f2d201bb7238d7867b36f993b733b28b86eda7aa9062e11
MD5 a9d6ffd39ebef13999e67af406ffda87
SHA1 94acf39b22dc7110f298becef78b99df160a5bf7
SHA512 b6d1f9aa4b3ad1d780e7e58dbfa6e4814aadc34607540095f204e660a5565b0391d0a34a08240323bd983e5698ad36dde2403af1634417da199eb608463aa02a
SSDEEP 768:myq7oURdFn4PDtodU1A1mEMwo83m6OJZglXG4ptiAbuUYhiS5Ip4:9qddEGFmEbmVclJ7buVg34
TLSH
T14D7309B393AC71FF1BA137C71C0BB95B16D24156E34906CAECEEC91C81C875412BA6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.weather_feed.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wnd7vig5.default-release\activity-stream.weather_feed.json
Size 14B
SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
MD5 3ea4da2ce03c4204ffe9b30074d62fac
SHA1 b6b82844f7ce93098971fea6f2559b220be08e2d
SHA512 dbbbee11f26deb954124b96d0fb7748ad170d9bab095f79691c83fb1dcfe57b453cd4ffd6a367c701d86bd676d40aabde7a390ecc57e2fcbd0c545d9940a41f2
MD5 SHA1 SHA512

Submit Download

24891

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wnd7vig5.default-release\cache2\doomed\24891
Size 155B
SHA256 855bf94cd05e11393ba0c049bf21b9b4fde4eddbcbd3b2f704bec816ec3b4ae0
MD5 a60a8a1694fda0bc6809ebab39831746
SHA1 a5f19e210c19af0bd0df8a612dee5bd2b933811e
SHA512 4435767faf15616d815db757ab78349c61a246c701129ae74e3f30389b63c1a6c428f2ae84b30c2db2b68b9322f5adfd26f5e05d37095fa41678f493e9286eb2
TLSH
T1D2C08CD80E49C2EDFF2A9CBE28BCB081884609509CA91D013B205984E1B87C83969B10
MD5 SHA1 SHA512 TLSH

Submit Download

28156

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wnd7vig5.default-release\cache2\doomed\28156
Size 155B
SHA256 4179c8e625b1780b72cf1b05bf5ea1e2ebf943f95afc3ba7db3e5928deeeddbd
MD5 53daf2db5fb4b8116de672452d7bdaaa
SHA1 367d707df58946e0fd716fba28255475c4fb1e50
SHA512 4b5d0460c04db5ab668ca850b242aa5494ba95fa6e07f0cd7bcd2dd47140b589de9c8e7e721901c248cd742dbf7efba328acab3683ab78e278e5db2cb11a9cc2
TLSH
T1D9C08CCC0A8DEAE2EF8A4CBE6CFDA88084880854E9E04E483B140680C0383C43879720
MD5 SHA1 SHA512 TLSH

Submit Download

7112

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wnd7vig5.default-release\cache2\doomed\7112
Size 146B
SHA256 7b170d8beb8efd72005e48d94b7032db71670c712039c36e4054b9dcdebb3e7b
MD5 93a8443c2d0af9c546c02783ab27d7f3
SHA1 527db6cc678acdb1019ca49cc6f2c507731aa8f2
SHA512 479c68b5da61d9933a4cb1bc863f6490dd75c001a6383f8d52e191545e31dd800e30274ce8c805a09ab679bbc5c5957eb56f91a2a0e52a689457b8dfd690bb8b
TLSH
T1ADC08C9C0D08D695FF868CBE0ABCA08084418860AD881D403A504640E1B8AC83826710
MD5 SHA1 SHA512 TLSH

Submit Download

7615

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wnd7vig5.default-release\cache2\doomed\7615
Size 257KB
SHA256 26c1248799aacccacc9f2e28652b10c5bd67bb46a036832263aa29599aa16a29
MD5 b625bd2866d01586d6d5577f81c3ec9f
SHA1 757cd61c37abf88279405e94d143ab37e27d368d
SHA512 e1b0c04fbe86e2b2c338a8ef3242df27a49e0f41e57b99933e057fb1018460216f5081edae75dddaa4adae3a0e08b5ab023a3092ab8d4754b3a079721d648df6
SSDEEP 3072:ZKCL3OWih6EVvc8bNO3yZg/BxmFKIu2Zj35:ZKCL3OWih5c8bNVZgSD
TLSH
T1E144F8F7969C30FB175297DC2C0D72CF62AF413ADB5209DAF86C8148C2C9A6510B679A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9970

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wnd7vig5.default-release\cache2\doomed\9970
Size 52B
SHA256 0c49a1cd7155b710e8a0eddbc585fc79edd3160dfbe6fcb05bcfc7942be9d83f
MD5 233e1a5bdea504c2d8c58ffbffba0f78
SHA1 fc2eab72bd82c6bb41b7b8626d1f7fb49004d8ef
SHA512 49b78f1a9d13cb7f8215437553e64495b4800e7169bf823314cca3db08cf855d16c1e646c0424f0090734b31091a6aa25c97289429e136de6f6c63ef9a2b7548
TLSH
T16D9002548A598A15D02981321E4198B90C503D405584021738910B5545211D25010100
MD5 SHA1 SHA512 TLSH

Submit Download

06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wnd7vig5.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
Size 16KB
SHA256 8d2ca1a09968aa5de1ca9c78f59ab79ba25a2e72d482ed1c4debcaac52828f89
MD5 4c19061f92d3d7acacff0b93951254e3
SHA1 55896c0746940d6d37e405280395cc886c3ebcf6
SHA512 454552b777642279ff36a6434760fe03243d3cdc54a8ea90c5436ddd931455ded8552b45b29805fed3e24e9d3cca8ede22e2ee609b4e0f073980164368eed4e0
SSDEEP 384:HXwIiO024YYWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAkrw:36ZYYWTToXJWTTogB7S/AmVAf+hRMRrw
TLSH
T113728E7D9F423CAD176790E4C8B983598D1CB2A7DFF6C02D15983D0DCA88A5A70F984E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wnd7vig5.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 c907aba4f948b41619985f5dfb1a290abee6c1728eb75d88663e9f427c9d1485
MD5 5d532d318edac288a8128b07b538b24c
SHA1 41ce64b4d5bd53192202f2d04338e259a484ca89
SHA512 4148bbc339ff99f32be6274edcdc713491efbf009aad4d39280a12c17fe9a6d0c32b9f6a34527752f8534ab0505a1ea48b7b19d037ac7c962d98f5815807572a
SSDEEP 1536:jTrlijZ4CDAQu7LhROr76nNI/s8vyNw7gS2X4jzKH1kGYpLjSw6nG9QAem6dgYWJ:j3lGu7Lhcv+I29uGYp/D63FbF8NZmc
TLSH
T18CB3AFF6DBA2CD7D55FFD42D6AC2843EFD222400B3A7201DC9236711A2CAB786675748
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wnd7vig5.default-release\startupCache\webext.sc.lz4
Size 106KB
SHA256 c48944852217cec0267856866d41a41f91439addee5d5dd092d6c2375392861f
MD5 5fa9176465d21f0108979d273a9f7428
SHA1 cdc2b0a65b3e090d41c171f30d34718c0388fc4b
SHA512 29d2a42316bae8e25c072ddb816fb99bce34fbfda542d5cb867661881a89a9aedfce8ff271ac663a2789645302c17e9ddc695636f9086dbc3a5139d98154bb3e
SSDEEP 1536:XTrlijZ4CDAQu7LhfPXDnf8VEJcyMvyNw7RS2CUrzKqPkGYpLjSw6nG9QAem6dgf:X3lGu7LhTgv+z2vcGYp/D63FbF8NZmi
TLSH
T128B3AFF6DBA2CD6D55FFD42D6AC2843EFD222400B3A7201DC8236751A2CAB787775648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\addonStartup.json.lz4
Size 4KB
SHA256 05abc69611b26255a8314c20dabae8ea4eac72301cb43dbcc09fe154261ac715
MD5 e621f1e53f15f40c603c0d6c7b447eec
SHA1 ab7ac4a838a298a75f4a54d2e26667fc16f77241
SHA512 fa13b77644a2cd8412a6d89fd3a89ccba8a55bd3c7b5e01eb5d8224d5710339f2cd393df965751fc2ce61cd2761abc8119b05bc5670ecdd6ae9ab6bfc1ee1de4
SSDEEP 96:Noy4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvh5hIRhN:NG52xxhD8rGvm6ApwnHfuhN
TLSH
T1F1A17D7AD541EFA1FE36C04348D93FB2E69A9B741479C4D4F16BB1294D34A735705340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 552f4556a6d028c2d04ae554116e8164db24b4427998bc44423eb657b088bf82
MD5 1d745d151fcef03e2735f7e9e54a3f8e
SHA1 56a4f1f3effba04b52a2737d4f3d9702caed2216
SHA512 692500f59c1e00abf4b9ee58fb4071a985dc2dc0c4e9718c2f5e64f58b8f42cd42e0c09729fff93a4c71f3924d21622d2d6073a5d99fc712f20371de34f3badd
SSDEEP 192:V1d66Joz0dzgCl6mc0d4Ov5zboHtZr9yjP8:Td66JozQzgC1j5boNZr9yj
TLSH
T122E12EA4EA29867FC458437BCCAA1B500F35389A9C8E3F19319DA0582D473DE768E17D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\datareporting\glean\db\data.safe.tmp
Size 29KB
SHA256 101eb200c7bc869e7de25ed1d071b8a96cd5980a44c9ae0678c86710f004ed0b
MD5 e88b284b0b48736606e097c682d6c232
SHA1 d45b49eb8b1dffb917cf2a41509db254c6821aff
SHA512 ec5a009742a5c17d8716df166f3e966969fe9b98878aa2a66b0f86703658f84a18a1d06d4811d7de50c2a9152a15dc17068ceafc51b40e19aa23e5a944665388
SSDEEP 384:tboXr9yjlvzbCIczOsfGcmhuQSKuKPoh3Sb/b5ZTrpLd66JozQzgC1jd:NAazbyfGcmhu77KPoh3Sb/b3rpEm/
TLSH
T123D20E80FB2A953FC41852BBDCA547102F79B886585D2F5B3A4C64686C872DC3E9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\datareporting\glean\db\data.safe.tmp
Size 29KB
SHA256 6146fa5d02a2a962e3da797a2bce79754dd1bf015699c59d48dda5338ba3bec6
MD5 2eb23630d9b39877bd2b953780f21e1b
SHA1 b0fcb67a9491c7326f027232fc06e50974ea8bdb
SHA512 925ed68d0284fed1854dbe63f0e65371f111a6d1071587d9814197da00d7c34b7d27d78b675b3bce6fdb201a3fc7332233b9e998f8a5e4685a8d62aedb28cf4b
SSDEEP 384:SvzbCIczOsfGcmhuQSKuKPoh3Sb/b5ZTrplbobr9yjed66JozQzgC1jd:QzbyfGcmhu77KPoh3Sb/b3rpVUum/
TLSH
T1B1D21E80FB2A953FC41852BBDCA547102F79B886585D2F5B3A4C64686C872DC3E9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\datareporting\glean\db\data.safe.tmp
Size 29KB
SHA256 20e58f401d1ffc8a9ebd5b61fbfb7b048c3b68fe21a21d41783da38ab742b178
MD5 b60a769b01d053c39d3b094a3cfa27fb
SHA1 a979d9bd66015920e1110c387b86eedae780d549
SHA512 73a403178b611bb378f0636c884304b35e0861f5a0dd315d9ab0ed0eae0d614f93e45e0f08a8180200d2f9ef0d665fbc720ab5fc0e99f3ef845f7d5dcb3f5eda
SSDEEP 384:tbobr9yjgvzbCIczOsfGcmhuQSKuKPoh3Sb/b5ZTr6d66JozQzgC1jd:NU5zbyfGcmhu77KPoh3Sb/b3rbm/
TLSH
T123D20E80FB2A953FC41912BBDCA547102F79B88658592F5B3A4C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 48cee1c7856354b5fee6dd684b3195f462d4bbf92929854a52cd8321a034e7ae
MD5 e7863427d9f1df559c2357bdebdd0836
SHA1 7b8b2a679fe62c5fed2594acd41c1c250762558f
SHA512 5d4dc7d02945670defe762f49054b0c7572f6ebfe228262cbd5c5ed7d1fb59bc65ae3e6e76d6f70aa1642ad2625d2f613181c5806c51a1820bf72619a7154b83
SSDEEP 192:jOv5zbooZr9yjP8O1d66Joz0dzgCl6mc0dz:sbooZr9yjtd66JozQzgC1jd
TLSH
T1E0E12DA4EA39867FC448427BCCAA1B500F35389A9C8E3F19319DA4482C573DE768E17D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\datareporting\glean\events\events
Size 1KB
SHA256 f9731037d5aaca015171c973545a6f48e460afd4791d3513295eaea927d7d2a9
MD5 41b88e9fb5a4496e9726feba1427b3b4
SHA1 e00d04cf1ee37e163a122dc707a4c72d6a1481a2
SHA512 1b56a794d216e5d4fbd7e4ac4a69d06130b6c510251b914080ca54b9817914f20782fdaf8e784a8ba3c4bb0490842cf40b130734563b894e3fa17614881679d6
TLSH
T1D2217C7C39B94D6EAC87FB9C7581028E53164E1B04871C430D62EF8DCCA1AED31A9439
MD5 SHA1 SHA512 TLSH

Submit Download

3e6b27f4-a7ba-4936-855c-d74ad9935e42

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\datareporting\glean\pending_pings\3e6b27f4-a7ba-4936-855c-d74ad9935e42
Size 15KB
SHA256 e1418676603fff61b724b15734d7d2d6386d4f2b6279a893c23e60492ce7b6ed
MD5 9abb92dd63f7e83add3d04b160f31f5c
SHA1 fb4ffc87b955b4cdf2d408e19caa54dcf15a528d
SHA512 0f24f5fb67bf56aa8ea1e2cdacea020bf845a6e78272c9311ada6f8217710cc3c638733f1e39cfd09d0ccf5ed9660fb74e20b0694a3ec460a304239fc3c440f3
SSDEEP 192:M1ZogqBd4Pg7f1+b1AUovxCTqQsE+7lv2N31hd+uWPuubkb7RzdiRKfHhL8A:r0YqCpPRuY5bkb7RBiRKfBL8A
TLSH
T17772DA16246055BAC651E3A894FCBFC3E6F53CCF4C419FCA9BE4BD0869EA06D112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4bd90b44-0d9d-4a51-9392-8fc657ba6cd6

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\datareporting\glean\pending_pings\4bd90b44-0d9d-4a51-9392-8fc657ba6cd6
Size 883B
SHA256 c721bd878be9cc0fc70351bb91cc6a5011d3d85f8f63b6c73efbb9dcc690bea0
MD5 c2d093bd138929d0f1dcb42ff1bad388
SHA1 eda00be0e1b16c5908798374a54e01cec2674951
SHA512 74742055a942925294a0d57d4e7c86849c34ef46f548a57a18b5afeb75be135d440a82e6ff31a85db82abc4be0e523b3d46d211246c6d65b85f514334f7df44a
TLSH
T151110080DB3175F3CCA8D30FC8AA774647E43533C0C989083DA299140D79A1ED7A6607
MD5 SHA1 SHA512 TLSH

Submit Download

6082bb6e-fcce-4a5b-811c-8c6c7265a744

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\datareporting\glean\pending_pings\6082bb6e-fcce-4a5b-811c-8c6c7265a744
Size 4KB
SHA256 0f7735cdb5470c369e67a082a5fda119b30a9fc66fbea2b69d1a4543ca9c9831
MD5 91e846b39422298e7bf46761769a5ad6
SHA1 d85332344d964c0dda7bc080977e9dc77c293519
SHA512 c51b7a804071e9b2343e0303ccf9d0b46fe3f46918a1547927b42f6c262dc824011c1e4e56bb06c3a167bc452284dc3eda6a9790a6987f8e41fb6d01223d6809
SSDEEP 96:dvYNGU9dX3MGh08boLVe0/9eanMD/J8/cAr6BWUXEn/3vhDCjimwkREIblBn/da3:dv9roVzVjS1
TLSH
T1EC81DBFDCD2210437E69F22EF1A9FEAB015A683149C8838D6BED483A36D6CB75553305
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c9af1f35-2c13-49b2-8fcf-6113de379735

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\datareporting\glean\pending_pings\c9af1f35-2c13-49b2-8fcf-6113de379735
Size 886B
SHA256 0e4039572c928f57191882415810de2ab2d57e87b99386994fea4eb280afa52f
MD5 b9c257bd484d515b0ba915eb9057d5bf
SHA1 851a9fe0e701a3c42d296168c9f4ff343a199d09
SHA512 bfcab8c1f158441886d2f995d07bf36b925f544b3d545c4d6d8f519880f037637c92058a93a12b62c93c22d67044acef5b8528ca60beff8b4f379017ccba13f8
TLSH
T19611C0908B75B9F3CDA8D24B98E5B75187E43433C0CD49187EA29A180DBA51EA367607
MD5 SHA1 SHA512 TLSH

Submit Download

eed88f5e-f1f6-42a8-ac8b-fc5515635f31

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\datareporting\glean\pending_pings\eed88f5e-f1f6-42a8-ac8b-fc5515635f31
Size 235B
SHA256 719ace6dd0c43b9be8c487b5572e168e558d53e4f8e1770b3ca8e1c077bea79c
MD5 4886a48860293e1a327503e6a3b0fca5
SHA1 9da729d3beb7834e684cac702da663229f42cdec
SHA512 9dcbfc84d7972f6479fa3cf046e616da4cf93bfedd6848d5265ba227b2c013001f3c3bfbd3efaeb1a207e4df177f2d1214002cd00f965ba81b0b2f48c0dd4c58
TLSH
T119D09788289863AD48044F07B0A06DC230844C3324A0E820A5A1C0789DBABCA8221D0B
MD5 SHA1 SHA512 TLSH

Submit Download

ef22f3a4-1057-444f-9570-633b6a699a89

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\datareporting\glean\pending_pings\ef22f3a4-1057-444f-9570-633b6a699a89
Size 2KB
SHA256 3260564ae0b42a374e66c8ddd5e4d41c59a784854391d461eaa6772708e35fae
MD5 33c7feb92f2f6775599299348b807a09
SHA1 0a164d81ba300a316a2b442548217831f8f6d7b2
SHA512 287972042b535afcaff3bbe083e9dd79719079ee679b35702385063ba0b8cf76ea31ea9a580d95b3fadf2a5f9d30a40cb8e2e0c8164b9d570bc37e93e576728f
TLSH
T17A4141586AB44CB79CCAF2AD94C1338D43604E0340862C832E91EE5CCD9679A637F81A
MD5 SHA1 SHA512 TLSH

Submit Download

fbc936f0-18ce-4a7a-a6bd-7c1783521449

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\datareporting\glean\pending_pings\fbc936f0-18ce-4a7a-a6bd-7c1783521449
Size 235B
SHA256 cb227e7972238c5315a2da309013951b3a777481e75599312da7978c6ac1fec2
MD5 9abc075365602dcc87606816dcc34a8b
SHA1 9786a70f5b6944bd6d25fdb343bfe319f5c574ef
SHA512 9b05f569d861a1dc256f3d56d835b1285aa4efc8d22d9217a1ffc4a96a4243d14a7b57e1d51d41080f3b25a4e3dfa0161f11888a5fe5e7a371653d555da1fd40
TLSH
T103D097D11488B76D0C180F0BF0E0A8CE30458C3390B558A0D9615A789AB8ACD0112C9A
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\extension-preferences.json
Size 942B
SHA256 a56a46aa7451d640626f9adbce3ffb26ea6ab549f15af56fc2cd69f0bcfda67b
MD5 8913f98eab4828647224c9a64b706b3c
SHA1 f886a4456ee44a4e73ef32a2b138193f2fa41d37
SHA512 28869c106812bf053c732469b0f67da993e42a471c7b576e68d45fe66d2f067bab0a66c5334e88c6460e08a06285daa643f5f34771bd0d7361097307137e1630
TLSH
T16211F13A640B6EB01E8E5625FA384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\extensions.json
Size 14KB
SHA256 04b0deb60f4338d3af0d93a49da31994e4ca4a6dc68c83de5ef162b7b2488d31
MD5 71dd0f635a8d7909ba09e07484e00ea8
SHA1 3b6178fb3a20d2b9c6203dac840dd6d975c820f4
SHA512 9a9599fbf0b509f357c5e3baf0a08a374d70a05b6a2b7267fd5df312ca580a3aa8799ad5eadbef55f97ded48cffea8222cba40c7458b08f7a005d973f43b7f8d
SSDEEP 384:pkI4vPUmldvP8dhW394zIB96o/L4HiL4Pz/L4HZL4HlL4HC:qI43RfcXK4Mn6M4w434x4l4i
TLSH
T1AB62531545148EB8298FA78BAA367E01C37D473B60845C78F4DD8FC842FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\prefs.js
Size 7KB
SHA256 cd0f9bb3888f79e39d1e699973c494af7fd9893959168457d23cc23ce86a27ae
MD5 0868520e6f3bfe178b6dd9d5b262939c
SHA1 bbbe387d2ec3dee5cb68cd120b54a8bc1a762513
SHA512 ec459d8f37ab1b46d24322d2e49afc1ad77b85ba5068db3d010254933bdea2791920bb5897392cf1df177091d2ba302d26545228544b87e6419cf9fa4b09ac99
SSDEEP 96:xHYOb6/bTjTUCqGqvEMLfoAJObzSPSSlcdv9jKDndH7IuBw88H8L4cnewQGS:GOb6/bTeRhfoAJ9SSBd77Bw88H
TLSH
T157E12E789108CB7F74B677AC6C6888315AB2013BBBBF68D750B594C90518F3441FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\prefs.js
Size 7KB
SHA256 73ad4cdde21b742234c661a0c36b16feaf0d1aa868be48f879366eed39213bd9
MD5 73889558afbbb8a1f3273efb065481ae
SHA1 e88070dcd1c96e300fbe92cd18f4fac344779be0
SHA512 454e935b03dcbe616fafa78f0775993e6c8aeed7afe387fabd27f884e073833c974916ad694d40e5ac53933e0c55f8ac08215064bcfe1bedeb9c353bb05beff3
SSDEEP 96:xHYOb6/bTjTUCqGqvEMLfmAJObzSPSSlcdv9jKDndWRn3IYBw88UK8L4cnewQGS:GOb6/bTeRhfmAJ9SSBcR3JBw88U6
TLSH
T10DF11E789008CB7F75B677ACAC2888715A72013BBBBF68D750B594C90518F3441FAAE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\prefs.js
Size 6KB
SHA256 60185b9aa62234131c640638ea0e1a136b21696cc43b5c87d9b4b49b64ea0707
MD5 a8f7fce1597011554f74ac267974d8cb
SHA1 dffede3242ea20e3263d2eb91147596a4bf9766f
SHA512 143b9665da84a958aed6fe5bb6fc4dcb4bf94827b14f118302a131193bd9ffcaa6e6a67494d2a6ad434380e9403df8dad0e1086bd935298407214cf1085905d2
SSDEEP 96:xHYUTUCqGqvEMLfoAJ1zSPSSlcdv9jKDndH7IuBw88H8L4cneZF:GVRhfoAJWSSBd77Bw88z
TLSH
T15BE11F7895088B7F74B677AC6C688831AAB2013BBBBF68C750B594C5051CF3442F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\prefs.js
Size 7KB
SHA256 1bfdbf7ec8d0f7cab9c5cebe3a0a60ce4cdd4fd56b577da5551beae2ab9b4787
MD5 f1925dfc5569ac2fbdc7806430ffb0c3
SHA1 5af842b4fc18d857f71e9167864161fa807a7b16
SHA512 d6b93ce3c86f31e11ad5b27c46f3db7a90333cf981d53dfcc7ea2c58ada3a78443e9cf4066a401bc52441af91b70de39ed67dd398ad312aa84e1a6a5035a55bd
SSDEEP 96:xHYUTUCqGqvEMLfoAJObzSPSSlcdv9jKDndH7IuBw88H8L4cneZQGS:GVRhfoAJ9SSBd77Bw88k
TLSH
T1A7E1307895088B7F74B677AC6C688831AAB2013B7BBF68C750B594C4051CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\prefs.js
Size 6KB
SHA256 838f9d575dc1a580c2869011d93344d6c7bf86ad94e1e059ac6fdb21a2391459
MD5 cdce157d23444fa2446852bb70f3c088
SHA1 41b953e6f220c6e32eb1ab18512d48d748a395de
SHA512 1d47e7f67bbf8d0e67f14ed9b3f4ccadc3e987128a63f77ee57bb4b21ebe298d7b5b0cacf60fa42293c128dfe06339bc4dd0ffe988facbf72ccb7a79e287f375
SSDEEP 96:xHYUTUCqGqvEMLfowI1zSESSlcdv9jondH7IuBw88H8L4cneZF:GVRhfowIdSSv77Bw88z
TLSH
T1DFE12E7895488B7F64B677AC6C6888316AB2013BBBBF68C750A558C4051CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\sessionCheckpoints.json
Size 146B
SHA256 7343d5a46e2fca762305a4f85c45484a49c1607ede8e8c4bd12bedd2327edb8d
MD5 65690c43c42921410ec8043e34f09079
SHA1 362add4dbd0c978ae222a354a4e8d35563da14b4
SHA512 c0208d51cf1586e75f22764b82c48ecbb42c1ff54aa412a85af13d686e0119b4e49e98450d25c70e3792d3b9c2cda0c5ab0c6931ebaf548693bb970a35ae62b9
TLSH
T1C9C02BC385460070CEC3229D33A07F92AE3F00FB37B10604706CA54C14770278203443
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\sessionCheckpoints.json
Size 122B
SHA256 72d74b596f7fc079d15431b51ce565a6465a40f5897682a94a3f1dd19b07959a
MD5 99601438ae1349b653fcd00278943f90
SHA1 8958d05e9362f6f0f3b616f7bfd0aeb5d37967c9
SHA512 ffa863d5d6af4a48aadc5c92df4781d3aacbf5d91b43b5e68569952ffec513ff95655b3e54c2161fe27d2274dd4778bad517c7a3972f206381ef292808628c55
TLSH
T14DB09296895A1070CE83259D73A47B92AE3E14F676A1164471ACA98C24BB0278657883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\sessionCheckpoints.json.tmp
Size 288B
SHA256 b779351c8c6b04cf1d260c5e76fb4ecf4b74454cc6215a43ea15a223bf5bdd7e
MD5 362985746d24dbb2b166089f30cd1bb7
SHA1 6520fc33381879a120165ede6a0f8aadf9013d3b
SHA512 0e85cd132c895b3bffce653aeac0b5645e9d1200eb21e23f4e574b079821a44514c1d4b036d29a7d2ea500065c7131aef81cfc38ff1750dbb0e8e0c57fdc2a61
TLSH
T10CD08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\sessionstore-backups\recovery.jsonlz4
Size 892B
SHA256 08129e3560404b9bd907b599801a1f28ceb7ca6ffb0160faa9597ceb7d3e08d6
MD5 cc0f154cc0689635a52e0bd704c09de3
SHA1 a84565ca4480e726ae3861f8bb9dd17407ee114c
SHA512 5f7fdf0fbc661ec4a4e17e2b6a796714ac32d5f80860792d0d64a80d85a6c3c7d521f598a045e35f94b80335203e8efad47a21d390faff22c0af384f2edabe85
TLSH
T1231184A2EB0971F31900B01B608EABBE1E99202201743460E78DA7001A9874BB28F54E
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 5d93bb347d874cc642465bfbdea6ac7b8db0ea4f02c4c18fe4a336ae7f6fe232
MD5 4051afbcd7e7f30c3bc103ebef24cfc9
SHA1 a7e6a6c3285808f3a823c56f68df038fb26710c7
SHA512 69efafc029d4b34b1825313bb428e95f33333b8a7c28ef9786871163883ed3353b9065e41ce9cb99794f51fe5d41e8dcb25c01d7f0d5a680388d2b371f108b45
TLSH
T1BA11B6D29E0E32F30A80A47B6041AB7D9AD92020017A20A5E71E1B0006AC74B738E28E
MD5 SHA1 SHA512 TLSH

Submit Download

sessionstore.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wnd7vig5.default-release\sessionstore.jsonlz4
Size 1KB
SHA256 6b45a4149d5c79dddfe141e892c37925d4ca8685e99552cc70619ffe0efe17c5
MD5 f6e8d80233ca01019fe234b0ee6ca7bf
SHA1 d76844f6467066344a051954254744654c1ed2ea
SHA512 545b6b24699a535660602b7b05df1b33a1a0bfc64789a7b33ef00572f8386d1fea7c79dba52088ef269bf0d1cb782793158a0963be4d8c1c668b23d76eb5c93a
TLSH
T1AE11C6E39E4A72B21A80747FA041BB2D55D92010067B20A1F71E5B0013BC387334F14E
MD5 SHA1 SHA512 TLSH

Submit Download