hxxps://steamcommunijty[.]com/gift/76566894433977630

Analysis

max time kernel
1515s
max time network
1509s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
20-02-2024 00:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://steamcommunijty.com/gift/76566894433977630

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

firefox.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe

Modifies registry class 1 IoCs

Processes:

firefox.exe

description ioc process

Key created \REGISTRY\USER\S-1-5-21-2398549320-3657759451-817663969-1000_Classes\Local Settings firefox.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-2398549320-3657759451-817663969-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 7 IoCs

Processes:

firefox.exe

description	pid	process
Token: SeDebugPrivilege	1548	firefox.exe
Token: SeDebugPrivilege	1548	firefox.exe
Token: SeDebugPrivilege	1548	firefox.exe
Token: SeDebugPrivilege	1548	firefox.exe
Token: SeDebugPrivilege	1548	firefox.exe
Token: SeDebugPrivilege	1548	firefox.exe
Token: SeDebugPrivilege	1548	firefox.exe

Suspicious use of FindShellTrayWindow 4 IoCs

Processes:

firefox.exe

pid process

1548 firefox.exe
1548 firefox.exe
1548 firefox.exe
1548 firefox.exe
Suspicious use of SendNotifyMessage 3 IoCs

Processes:

firefox.exe

pid process

1548 firefox.exe
1548 firefox.exe
1548 firefox.exe
Suspicious use of SetWindowsHookEx 7 IoCs

Processes:

firefox.exe

pid process

1548 firefox.exe
1548 firefox.exe
1548 firefox.exe
1548 firefox.exe
1548 firefox.exe
1548 firefox.exe
1548 firefox.exe

pid	process
1548	firefox.exe
1548	firefox.exe
1548	firefox.exe
1548	firefox.exe

pid	process
1548	firefox.exe
1548	firefox.exe
1548	firefox.exe

pid	process
1548	firefox.exe
1548	firefox.exe
1548	firefox.exe
1548	firefox.exe
1548	firefox.exe
1548	firefox.exe
1548	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

firefox.exefirefox.exe

description	pid	process	target process
PID 3856 wrote to memory of 1548	3856	firefox.exe	firefox.exe
PID 3856 wrote to memory of 1548	3856	firefox.exe	firefox.exe
PID 3856 wrote to memory of 1548	3856	firefox.exe	firefox.exe
PID 3856 wrote to memory of 1548	3856	firefox.exe	firefox.exe
PID 3856 wrote to memory of 1548	3856	firefox.exe	firefox.exe
PID 3856 wrote to memory of 1548	3856	firefox.exe	firefox.exe
PID 3856 wrote to memory of 1548	3856	firefox.exe	firefox.exe
PID 3856 wrote to memory of 1548	3856	firefox.exe	firefox.exe
PID 3856 wrote to memory of 1548	3856	firefox.exe	firefox.exe
PID 3856 wrote to memory of 1548	3856	firefox.exe	firefox.exe
PID 3856 wrote to memory of 1548	3856	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2504	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2504	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2260	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2212	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2212	1548	firefox.exe	firefox.exe
PID 1548 wrote to memory of 2212	1548	firefox.exe	firefox.exe

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://steamcommunijty.com/gift/76566894433977630"
1⤵
- Suspicious use of WriteProcessMemory
PID:3856

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://steamcommunijty.com/gift/76566894433977630
2⤵
- Checks processor information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1548

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1548.0.1607752785\1248114963" -parentBuildID 20221007134813 -prefsHandle 1848 -prefMapHandle 1840 -prefsLen 20749 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {fe793791-dd46-4524-9ff4-0c865dedfe29} 1548 "\\.\pipe\gecko-crash-server-pipe.1548" 1972 1d5bb9d6758 gpu
3⤵
PID:2504

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1548.1.2084020075\1803450101" -parentBuildID 20221007134813 -prefsHandle 2392 -prefMapHandle 2372 -prefsLen 21565 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {16432431-45d1-41ea-86f1-d9f37f457661} 1548 "\\.\pipe\gecko-crash-server-pipe.1548" 2404 1d5bb8ef258 socket
3⤵
PID:2260

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1548.2.1856532129\590104459" -childID 1 -isForBrowser -prefsHandle 3432 -prefMapHandle 3172 -prefsLen 21668 -prefMapSize 233444 -jsInitHandle 1396 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {770022bb-c975-4cad-abff-b9a5688f3a96} 1548 "\\.\pipe\gecko-crash-server-pipe.1548" 3248 1d5bf8e9258 tab
3⤵
PID:2212

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1548.3.1339933134\119127179" -childID 2 -isForBrowser -prefsHandle 3944 -prefMapHandle 3940 -prefsLen 26066 -prefMapSize 233444 -jsInitHandle 1396 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7cded5a5-e549-40be-b362-8a27ba2fd5d2} 1548 "\\.\pipe\gecko-crash-server-pipe.1548" 3956 1d5af062f58 tab
3⤵
PID:3956

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1548.4.2083178390\650259763" -childID 3 -isForBrowser -prefsHandle 5024 -prefMapHandle 5020 -prefsLen 26206 -prefMapSize 233444 -jsInitHandle 1396 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {322e50c0-062b-4060-9657-ccf9230891ac} 1548 "\\.\pipe\gecko-crash-server-pipe.1548" 5036 1d5c09c1d58 tab
3⤵
PID:2232

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1548.5.884576307\925533298" -childID 4 -isForBrowser -prefsHandle 5160 -prefMapHandle 5164 -prefsLen 26206 -prefMapSize 233444 -jsInitHandle 1396 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fe4d4cbb-9979-44f0-b756-89cf7f133a07} 1548 "\\.\pipe\gecko-crash-server-pipe.1548" 5148 1d5c2883558 tab
3⤵
PID:5092

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1548.6.1245395891\762264577" -childID 5 -isForBrowser -prefsHandle 5344 -prefMapHandle 5348 -prefsLen 26206 -prefMapSize 233444 -jsInitHandle 1396 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4fa7ba32-bf0d-4f0e-a28b-8b7615591dc7} 1548 "\\.\pipe\gecko-crash-server-pipe.1548" 5336 1d5c2883e58 tab
3⤵
PID:4892

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1548.8.1982383658\474935707" -childID 7 -isForBrowser -prefsHandle 5924 -prefMapHandle 5928 -prefsLen 27738 -prefMapSize 233444 -jsInitHandle 1396 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b366f65c-77c0-4fe3-a281-f930dc34acac} 1548 "\\.\pipe\gecko-crash-server-pipe.1548" 5916 1d5c1025c58 tab
3⤵
PID:1112

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1548.7.1419642162\215227090" -childID 6 -isForBrowser -prefsHandle 5112 -prefMapHandle 5128 -prefsLen 27738 -prefMapSize 233444 -jsInitHandle 1396 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {14af3050-ddd5-4d4c-ad68-0c32e9433694} 1548 "\\.\pipe\gecko-crash-server-pipe.1548" 5088 1d5be980a58 tab
3⤵
PID:2456

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1548.9.2024141259\2056408194" -childID 8 -isForBrowser -prefsHandle 5916 -prefMapHandle 6096 -prefsLen 27738 -prefMapSize 233444 -jsInitHandle 1396 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bbaeec8c-3502-4912-aa8a-f091da5c2f53} 1548 "\\.\pipe\gecko-crash-server-pipe.1548" 4984 1d5c0a0d158 tab
3⤵
PID:2600

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\stdidscq.default-release\cache2\doomed\15011
Filesize
10KB

MD5
3990a8df9fa2a5b7f14cb329f8de7607

SHA1
31ac9416665ba01243f499ffcbef48fc4b495f0b

SHA256
ef82d0c764a171726f6eef577448b9c81ffe86b61d0e775a943abe43b18cec1d

SHA512
75af30c8ad0cb7aa46cd9886ca6c47412795dd940380e3c91de021652fac786eec2724152ae86f2c52aaacc190f130c7d49ca275c248a3786b9b4555cc303de4

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\stdidscq.default-release\cache2\entries\3144F2AC18576503F0CA343062EC95C18542A9B1
Filesize
121KB

MD5
3eb06ed52ade2e5f28629a4db710a94c

SHA1
192a603fc986fddb1543efe5ad7fb1354ae1541c

SHA256
e5ce5cc6752dc4214c4ee907626d1c360d52e7a4c2306e158a90a5182d9ffb2c

SHA512
6bcb47caf8cfeeace29d746b9f6a27415095ad6b499502ae6003b20e720a24bc3f94b5e9717616ee4eab299d4b222dbde51391236fde5ab0c22851eaf1c9ec74

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\stdidscq.default-release\cache2\entries\760190F9341C5AAE6468BFCF6B439AC6AE92B0BF
Filesize
35KB

MD5
7ab7aefd8c6a5281926ff00fe0b4456f

SHA1
1629c4e71e58839691d38cddc7c1ff7ee97c90bd

SHA256
3164d725bfe84f49c003c26f5035a63f24c683cc219e5b3e2a2569765398bc55

SHA512
abc16d9b1caf93267b21325649c73543e7e4e7f7ec4a7cc8c298b69dc49b404ad90d7281269b364b21424b48bf978d7e09601bc506cab7a7df961152d5137d93

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon
Filesize
256KB

MD5
855190914faf7505eb300d469e52c2d0

SHA1
c76d8c7d5dca5783802e92bbf567dba0f32a5069

SHA256
2af7e7b4c58799ca6f474b6a95314cca6d8891b8bb9781cba2503f4483bd047b

SHA512
f681d3c3fdee94ee01de5a407ad746728a0dec81e18adbdaf852857d0103edf81039670a982d6443e4f7a8399da69a3d220ec2b9029094611401e9c288a2407f

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1
Filesize
2.7MB

MD5
50dc4a9d62ffacb6152d361e74bd12d6

SHA1
71cea040c5d00cbad088f1db5e6a52d7084e9836

SHA256
37e8170b9c53d512afdca51daeb17abc0e1a65974bb41a83401c01351a06588e

SHA512
df109c4c3b33bf3f3c375998b40ed08ad8088b877a6ecae482d8398b9f301f38902c92208320abef5055dca24bb291f3928b5ce2e36ba73d9cc49437ea070f93

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Filesize
7KB

MD5
2a9b878c471288fea19bcb5cf5ccce76

SHA1
33fdee890e08a141ab2720e5a4391c42deab6977

SHA256
acec6c4475201ff37321e0357218202b2d63205d6b063f6348ea0e5406214b59

SHA512
e6ff81e2ab28377e40402f082dd78c5dc36cef3e533cf9e3e3715be4d32eba2584b5214352b6bcd0c67812e227a311a5322c103e60ac9ed4cf4648d1a112c350

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Filesize
7KB

MD5
49f6b47a02285de236f32a221cc45c77

SHA1
3df8dde2e475247425bf911e7609fe9da6124c66

SHA256
9cc087fca0291a236e3d95d20af0f1f7c0bd1e9e37cbab0df0a69fb2850e8586

SHA512
37df7e0053efaa6d5e8f6f9460dcdc7c6d42668d8d01b1b243a9cbd2f6e8cb4e3b37a6e62abe8fd510646a7896e39057b295939985e54009a099e481a4420ae2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\bookmarkbackups\bookmarks-2024-02-20_11_eAxAL8SpFfZxWj+8QWgDyg==.jsonlz4
Filesize
950B

MD5
6c53fd868850f42922d96824d8a5d8b9

SHA1
2f1a931c418593cc66c10c53d2a9fd52a76ad106

SHA256
4b24e064ccf3cae7a9fa10520afd392c7782d2ac2480825529e9c9d77b60d470

SHA512
65e938acd9cb2e7cb7d23be342a128154b3adf4fa56635c021ab3df4a9e65a5604c5e9dd645d950e060291ce69dc3bf5fa019c5aa77133a26a4e87cea73be3b6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\broadcast-listeners.json
Filesize
204B

MD5
72c95709e1a3b27919e13d28bbe8e8a2

SHA1
00892decbee63d627057730bfc0c6a4f13099ee4

SHA256
9cf589357fceea2f37cd1a925e5d33fd517a44d22a16c357f7fb5d4d187034aa

SHA512
613ca9dd2d12afe31fb2c4a8d9337eeecfb58dabaeaaba11404b9a736a4073dfd9b473ba27c1183d3cc91d5a9233a83dce5a135a81f755d978cea9e198209182

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\datareporting\glean\db\data.safe.bin
Filesize
9KB

MD5
dae27812e43414bbf3060787e78bc680

SHA1
d7291c29bf9495c8d552a5aaf20ae1075b5ce49f

SHA256
c45a908209b9348b04172c610f2c3755c57868d15d900dbc216a153e77b46993

SHA512
f6b6c440d12d38ce7cd9ed2709611769d3f46a0eb0da3da32497c0dc6048e52e5ac2855fd082d8d0ff77dbb726a4f3f8d1714fee1b249c33aa81d9c653f421af

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\datareporting\glean\pending_pings\def9e1a1-fbbe-4e75-9b44-744daf7545c1
Filesize
734B

MD5
e99cc479d93836ebdf3d312b05b293fd

SHA1
8eb8ef1a0a149f399c3fbf8ed5495b1fd05afdfa

SHA256
b918c788104c507a22df05fc894ffd86d8799f7ed53cbfb795506406c85fb9dc

SHA512
40c787f01df491b846bd31d8c0519db64debec9b3ceaa09fe5cabd20555c245947c5d34d5e50538d82065a39266763f0e6dcbf35e59858d0b3a4f8989913ef70

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll
Filesize
997KB

MD5
fe3355639648c417e8307c6d051e3e37

SHA1
f54602d4b4778da21bc97c7238fc66aa68c8ee34

SHA256
1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e

SHA512
8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info
Filesize
116B

MD5
3d33cdc0b3d281e67dd52e14435dd04f

SHA1
4db88689282fd4f9e9e6ab95fcbb23df6e6485db

SHA256
f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b

SHA512
a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt
Filesize
479B

MD5
49ddb419d96dceb9069018535fb2e2fc

SHA1
62aa6fea895a8b68d468a015f6e6ab400d7a7ca6

SHA256
2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539

SHA512
48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json
Filesize
372B

MD5
8be33af717bb1b67fbd61c3f4b807e9e

SHA1
7cf17656d174d951957ff36810e874a134dd49e0

SHA256
e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd

SHA512
6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll
Filesize
1.4MB

MD5
002f5eac489dda0aec0c9ea6ad6068a0

SHA1
0f530a69c822efaa5a992360a47057a94f8b29ac

SHA256
653f0d331adba2ca6834882f6e1e79e528963e6ec1f75e2d2aff57299e11a8d6

SHA512
2f9ea1f784e839f9806a4074ee76ac4d5d68f3471dca901e9aac38905b41e1357411b97eb0547fca73a23af4c21556e94cacf50ead6c4a4c1c35114c9f1b6b4e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib
Filesize
1KB

MD5
688bed3676d2104e7f17ae1cd2c59404

SHA1
952b2cdf783ac72fcb98338723e9afd38d47ad8e

SHA256
33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237

SHA512
7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig
Filesize
1KB

MD5
937326fead5fd401f6cca9118bd9ade9

SHA1
4526a57d4ae14ed29b37632c72aef3c408189d91

SHA256
68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81

SHA512
b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\prefs-1.js
Filesize
7KB

MD5
229327bc281fe8621f995eba2d8d2657

SHA1
2d87c5eb045137b499093e8f4fc1f71d0bcd950b

SHA256
2f66e8ff82e42e5716ad7820f730e83ba5aa83d0ccd0d44f6531451af82e47c4

SHA512
d9c6db3af497cb197f2070d2b058744dadcfbe11e03d2d3711b543e7b85beb4a556bff28df22cb2e7c7059460edc0c750413a724453cc5c669a6ee533cae5d24

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\prefs-1.js
Filesize
6KB

MD5
cb61a9978a08180056af4d4f9e62a1dc

SHA1
ce055b7adbe8e2daf95667a0633c291d68e49bf1

SHA256
fb93ca72357f7e7ac5e80fc5c13c149d2a92fda0cd060bcd5d7ad6156e4c8bc1

SHA512
14d7e903affb89e4459179ca6d514d6a061eb54f9ba97795cc23caf3a6cfe808429f7dc19d4dea7f8c852960757ed8b042d656a3c1d077ced19a2f202e1b5439

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\prefs-1.js
Filesize
6KB

MD5
b9cc7852b3b14dea126d0d8ac6f5fb62

SHA1
1489fd45bc3414a32fd1612eec0fd94648bb507e

SHA256
ff074a8a88f83ad63da62fba74373c63a30bc13de808880eb933ebbbb292d563

SHA512
e8b1e5efc832cb4fb0ab1eda6f0f39dc76444859b590cf1abda33e474b0d369ef2c9dcd30f11f91e01dee0ec3468bb477369830349d6ca96f2d1449a6766c4e4

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\prefs-1.js
Filesize
7KB

MD5
1b517bcd3e0c632a6d25c19847fe104d

SHA1
16a211c193e93c0de7ce0d309def57b6238079b6

SHA256
605550c63f811b4a8b162703f2145491d0ea6eea5e407ba17762d878399f129b

SHA512
ac90550af2cf56171507428d9a87eb5de80dcec03d1f68550760c4508a5fd4199e1b6eb5ce402bb7350959784d68d8f764c2709e066c4919c9a199f9b904906d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\sessionCheckpoints.json
Filesize
90B

MD5
c4ab2ee59ca41b6d6a6ea911f35bdc00

SHA1
5942cd6505fc8a9daba403b082067e1cdefdfbc4

SHA256
00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2

SHA512
71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\sessionstore-backups\recovery.jsonlz4
Filesize
1KB

MD5
8017cfdfbae44b552bd386206d9835fe

SHA1
e65ae9be90e8c1d010db72642d4ffe7bdf7b58fe

SHA256
769948f2f6b1b3e32efd560da3c1c1074493cd2f812a23882b4e974cd6381f81

SHA512
a4873ddf6d70d59e072d380988cf5821d24b1c286a22c18e7a80173ab906f957b1be05210d199e6da5618044e06a1093e010f05ce8e29a331e88826a40746f61

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\sessionstore-backups\recovery.jsonlz4
Filesize
1KB

MD5
f2df08260c6c0249eb265b974cb1ec61

SHA1
90f31d70f60bce1a560ce0a3a53d6a604899f589

SHA256
acd7271cde428515d063c2f9851fb34ffa527ecfe11509536c643d34fc6c7dd5

SHA512
127ae4b585e0ace6f3fb189bd60a8199abad6c41bc8a0cfd85ad7eee04ac5a85f3edac9350bf473b73d4c4d2c23ad8965dae9fd6dc1dd84971ec579b7652e7ec

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\sessionstore-backups\recovery.jsonlz4
Filesize
1KB

MD5
7d1cdad2cb04acbf8d267cd35456e63f

SHA1
5c284093458e68d357e5073a8878a06334730d06

SHA256
5511eb172a5a2ef3b09382a8fa9f4a1a49552a3f321412b9dc2d535b008232b7

SHA512
9054f0fd04f8e89a2e8f7a6b3d9ae724d71dccefb39c78929dc6a2691dd1b1882f31ea409c6bd776dd654cca4190a6cb9d0dfa5977d7a8a66ae7dc9eaa146ed6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\sessionstore-backups\recovery.jsonlz4
Filesize
1KB

MD5
2e99502eebd6852a3eed4b6518e8ff79

SHA1
023a11f413c28d26cd61450f5e69c7d246aa75d4

SHA256
8272a7fb4e9d762268a19b1a380204c8c343c59cf016ca20eb073b47b0aee4ea

SHA512
85071f0f5d9afd92edceccbeaeebc8038b7473ebadf225b1d0c35a52439be875cab33e4569ae17c4a08b88af1e5c7723d3a8942b4f10f89ddf7dd584d3934e92

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Filesize
208KB

MD5
734db158dff88df66878eccd4a5f63ac

SHA1
9abd959f09f3e3a3be264213e0ab3fd4adfc5399

SHA256
92107396a9c929b9d4130ed7ce5a4a6c68d063e2a654aaa0488ccb396f55ac5c

SHA512
e3d86474705c0725fa64dd1beaae3c32070359ba2420760bd2e0986ba7eba82ee010efae9c9f22b4aaa2987a37f87ba672dd2e5a173370802b0d88d2923a931a

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Filesize
184KB

MD5
3ddb9352df441733c4f0c39f4e4304f0

SHA1
d3df42dc748ad3d418d39106df5b49f5354496c5

SHA256
a9bf7085105057f473a7afb219f537b438c6dd653bb0e791237db8f8d8c5d3d0

SHA512
db7ba105728c2fe14fcdf5b968fe8237c285673fe4630c509f64ebe8c05277850e1fb65b9f6bccc1a2a9779449217eb98d3294def1512901aee0ec9bdc29ba12

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\targeting.snapshot.json
Filesize
3KB

MD5
70267d3ed58efc7c03fbb509ecf1c6bd

SHA1
572d1ca5f714ee77110c149fe9c43ee199ba388e

SHA256
af79bcd8c7b74c0e9e59417b28ff47bd46ba324f10e38e9d42b520479a6e589f

SHA512
f050247228ee7865b4f8435459cda7ca5401b8308ae461bf53667328fba5a2f1c81496b733b85bce6b92b1f697c2190ad1f862eea70714e48cb970df8abbf060

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\stdidscq.default-release\xulstore.json
Filesize
141B

MD5
1995825c748914809df775643764920f

SHA1
55c55d77bb712d2d831996344f0a1b3e0b7ff98a

SHA256
87835b1bd7d0934f997ef51c977349809551d47e32c3c9224899359ae0fce776

SHA512
c311970610d836550a07feb47bd0774fd728130d0660cbada2d2d68f2fcfbe84e85404d7f5b8ab0f71a6c947561dcffa95df2782a712f4dcb7230ea8ba01c34c

Download Submit