Resubmissions

29/03/2024, 01:48

240329-b8d7kaed2w 3

29/03/2024, 01:34

240329-bzjqpaef29 3

Analysis

  • max time kernel
    484s
  • max time network
    596s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/03/2024, 01:34

General

  • Target

    testestestestetw/triage - Copy (30).exe

  • Size

    1.2MB

  • MD5

    08b8eb8dd9681bfd0050fa7e547e1fd9

  • SHA1

    f810b716884668bbc554aae7914dd19f1c30c265

  • SHA256

    e8fec48d4400319a802dcc42081e768ef0bf8ec965e65d95ec4502ea3c35ac6b

  • SHA512

    d0fb222a0b356abce4f8489e953db9c9330e2446007eb002a7c7db3022f931fb22d5686da5749ea03504cffb241e21768512c9c6d20156fac32c81b0070c878f

  • SSDEEP

    24576:bdofGAmSIQ177wZ+A7MjiiRDXU/Sat5RgsLSmIOHsU5zMmX1xYwncqKvGqU/:bdofGbSIQ177wZvYjiiRDXASat5RgsLn

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 8 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 7 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\testestestestetw\triage - Copy (30).exe
    "C:\Users\Admin\AppData\Local\Temp\testestestestetw\triage - Copy (30).exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:760
  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2144
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe"
      2⤵
      • Checks processor information in registry
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4004
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.0.1242734115\844633431" -parentBuildID 20221007134813 -prefsHandle 1888 -prefMapHandle 1872 -prefsLen 20749 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {78fdbf82-20f5-4a73-98cc-3234d9dc4c69} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 1980 24ff4fec358 gpu
        3⤵
          PID:1948
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.1.504623539\753834059" -parentBuildID 20221007134813 -prefsHandle 2368 -prefMapHandle 2356 -prefsLen 20785 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3cf68c36-cab7-4088-97f8-abfbf7965e76} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 2380 24fe876fb58 socket
          3⤵
          • Checks processor information in registry
          PID:3336
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.2.205358701\1292144194" -childID 1 -isForBrowser -prefsHandle 2884 -prefMapHandle 3084 -prefsLen 20888 -prefMapSize 233444 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {515de5f4-877d-4226-8dc7-f519382d5f84} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 3032 24ff4f64558 tab
          3⤵
            PID:2404
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.3.1722576792\807334052" -childID 2 -isForBrowser -prefsHandle 3000 -prefMapHandle 2996 -prefsLen 26066 -prefMapSize 233444 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {34dbd6c2-2d74-43bd-b0f4-23e91a69d863} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 3560 24ff97a1658 tab
            3⤵
              PID:4396
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.4.1798048078\1791992501" -childID 3 -isForBrowser -prefsHandle 4532 -prefMapHandle 4528 -prefsLen 26125 -prefMapSize 233444 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bc6f6596-4dec-41bd-9d54-3d5c3b093ab6} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 4540 24ffada5658 tab
              3⤵
                PID:4320
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.5.959716750\480157173" -childID 4 -isForBrowser -prefsHandle 5076 -prefMapHandle 5068 -prefsLen 26125 -prefMapSize 233444 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {dfce5b8f-ef68-452b-8689-9a41e3a4d448} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 5088 24fe8764a58 tab
                3⤵
                  PID:4136
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.6.1525832329\624393547" -childID 5 -isForBrowser -prefsHandle 5204 -prefMapHandle 5208 -prefsLen 26125 -prefMapSize 233444 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {562e77c9-3370-4296-9fc6-028c23e72606} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 5196 24ffb386258 tab
                  3⤵
                    PID:4252
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.7.1432297678\531310907" -childID 6 -isForBrowser -prefsHandle 5396 -prefMapHandle 5400 -prefsLen 26125 -prefMapSize 233444 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8df7792e-eb47-4f2b-b560-8e83e5d2705b} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 5388 24ffbd2a258 tab
                    3⤵
                      PID:3304
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.8.1669251187\83689591" -parentBuildID 20221007134813 -prefsHandle 5904 -prefMapHandle 5800 -prefsLen 26206 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a6aefa40-2aa4-4e44-9011-a14054a9ffc1} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 5912 24ffc6dee58 rdd
                      3⤵
                        PID:5540
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.9.1703845985\253425609" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 5944 -prefMapHandle 5840 -prefsLen 26206 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6bd42d68-9f3c-44e9-b377-70f38c1d844b} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 6036 24ffc82b558 utility
                        3⤵
                          PID:5576
                        • C:\Program Files\Mozilla Firefox\firefox.exe
                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.10.1029323581\1680600146" -childID 7 -isForBrowser -prefsHandle 6228 -prefMapHandle 6044 -prefsLen 26206 -prefMapSize 233444 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d6ef14aa-17d5-418f-8333-dc515ac4aace} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 6240 24ffc6dbb58 tab
                          3⤵
                            PID:5680
                          • C:\Program Files\Mozilla Firefox\firefox.exe
                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.11.414766623\69305416" -childID 8 -isForBrowser -prefsHandle 3552 -prefMapHandle 4524 -prefsLen 26285 -prefMapSize 233444 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {72b9ceac-0150-4dd1-9bc2-1b27db48cc3c} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 10128 24ffc69ab58 tab
                            3⤵
                              PID:768
                            • C:\Program Files\Mozilla Firefox\firefox.exe
                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.12.1603645321\1511997244" -childID 9 -isForBrowser -prefsHandle 6448 -prefMapHandle 9948 -prefsLen 26460 -prefMapSize 233444 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a5ad86a2-5501-475d-ab10-304af758642d} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 9980 24ffc9c0658 tab
                              3⤵
                                PID:5488
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.13.905052716\301326524" -childID 10 -isForBrowser -prefsHandle 5352 -prefMapHandle 5184 -prefsLen 27463 -prefMapSize 233444 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {839fcff1-5ccf-4fbb-bb61-f1fd5d9bc0e3} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 5568 24ffd72b958 tab
                                3⤵
                                  PID:3344
                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.14.1521711652\1745091275" -childID 11 -isForBrowser -prefsHandle 10084 -prefMapHandle 10068 -prefsLen 27785 -prefMapSize 233444 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a2d8dbc0-1cf8-4d7f-a56f-216cc9a9a4b0} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 10112 24ffb16fe58 tab
                                  3⤵
                                    PID:4708
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.15.39653549\1749617861" -childID 12 -isForBrowser -prefsHandle 4500 -prefMapHandle 9632 -prefsLen 27785 -prefMapSize 233444 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d3055d27-f3ad-4f3a-9f1a-310611bc8978} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 10136 24ffb82fb58 tab
                                    3⤵
                                      PID:2168
                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4004.16.1102258750\483772151" -childID 13 -isForBrowser -prefsHandle 9428 -prefMapHandle 9408 -prefsLen 27785 -prefMapSize 233444 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4162798d-5604-4b28-a3b0-6bb6419aba3d} 4004 "\\.\pipe\gecko-crash-server-pipe.4004" 5352 24ff916b558 tab
                                      3⤵
                                        PID:3728

                                  Network

                                  MITRE ATT&CK Enterprise v15

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\cache2\doomed\11671

                                    Filesize

                                    8KB

                                    MD5

                                    49edfb47d76017995c984a27279e91a1

                                    SHA1

                                    2d9857e13e696dde2da19805c2314c512375d49a

                                    SHA256

                                    6b534070cc8274aad6e77313b0e634f7b8e02a349c47e0f7fe2fdc6d5b3f9d1b

                                    SHA512

                                    a08f54e10dd0894b4c6cac88ceac2e67f5f8249de71002bb58d6d08fd8a757936cfdcafd9e2a314f85f893a4d390c37441238b1dbb3d2719baf49c40c8c69df7

                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\cache2\doomed\13494

                                    Filesize

                                    9KB

                                    MD5

                                    2085298c1a07bb9027fad9d1e1848595

                                    SHA1

                                    70057cbdd696b6d178571082bb5af9382c035a1a

                                    SHA256

                                    524b0893ce75b9d2406369311e2635360e940904c79f589090081af529885b1b

                                    SHA512

                                    d82a61a57650ce98a702b5a3b27f631007463d3899d39e5d67ba46df11e81232f2ecc85cd508735cd5361c0ae0ca9657edf8cf42824f9f68808fe3c7bb11a93a

                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\cache2\doomed\14545

                                    Filesize

                                    9KB

                                    MD5

                                    797c186cef2999b6e910749b351a3f2b

                                    SHA1

                                    977498e15c756133921cf154d9c993839b47a300

                                    SHA256

                                    20622bc2608906d883034962355abd1d21810669829ddf64371b4b1a3a04e214

                                    SHA512

                                    3e7426628a4a0a859c17e4a0eafea74e22e279fefe3f91cb47cd8fc55341057d72efd63b843f689234e9b9694def41ab12acd5d35279fce68961f5059253fd66

                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\cache2\doomed\23908

                                    Filesize

                                    9KB

                                    MD5

                                    69d5f278f19b6606db27631aea41dd79

                                    SHA1

                                    ac2637447d11aa3ee18f2645ebec038ff6acc628

                                    SHA256

                                    7c85d67e3fffe9dde2e9c25677ecd0e4c96c1b9f25c13a486a229d81ed22616d

                                    SHA512

                                    eec6489827581e002f7826a0aa52b9f6123acadf553dc7a69d05222a6747d938a4d8f5520337d03783dce75166d9b2924b3f75721492deda9e3a0b12b0e6f772

                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\cache2\doomed\28594

                                    Filesize

                                    9KB

                                    MD5

                                    2f223b51ea1436bc34ee4ae611126d19

                                    SHA1

                                    f74ad313a3477c20ff46ffc9d8b69d604dc79e45

                                    SHA256

                                    375b234f5dc131529aea619ca5efb8dc2ad4f61cb72fb052ea7d9073daa403a0

                                    SHA512

                                    5c87d3bfeb45ddb2a04c80362615f6feb679626563299a9e5b8f00dfd60eff608aeea39aa4f1d70d05e462a5d22f00ec44c7e2fb3d630d67d360a9839021c48a

                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\cache2\doomed\29581

                                    Filesize

                                    8KB

                                    MD5

                                    cf6a6fd323c963c90bfa34b7dc6e264c

                                    SHA1

                                    23a5bb0e7be52dedab54019db95332ca69ab2d57

                                    SHA256

                                    b929b54745ddad2ed007ecaab84259b7986dde27d410d8c26b3f436929de0052

                                    SHA512

                                    27f9013122a61c0becaff874054e800eb2f36b4c1e7ec36cd27d44b077e277e5824954c8b1fe9e7748b67807730a6584f7282197ab5e8d33fceccbd1b56231a5

                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\cache2\doomed\31063

                                    Filesize

                                    9KB

                                    MD5

                                    eedcb561e912ffb63dd1f3f22b02a2c5

                                    SHA1

                                    6c7a78ef56d5e2279438ad0f77c3cd5e01c5e282

                                    SHA256

                                    2e824968596d08b382053ed155810a20a0479b65a8ff0ac6fc9f8bb576aeecae

                                    SHA512

                                    2afe6fe941e9ec2e8b0961bed735d817e2ad27c72763bcc8369b6a8ec2c20b1bec4dfe5d49d8bfa799f837b4eaf5422a376763280a351d734170228d09fd1f91

                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\cache2\doomed\404

                                    Filesize

                                    8KB

                                    MD5

                                    4a59e2b94f118cc42e458094e869dc81

                                    SHA1

                                    3d19dddb8a9d50750a583364f1be87d8275d4aeb

                                    SHA256

                                    7e8d523d64db3a4fd5a588419e57a8aae87905108e498001f5fafe0fc06ad214

                                    SHA512

                                    d35ae98d3f61bfc8fc853398d4ce831d3da4882051d8eb2fe57e67cfb0b06b4df9366eae80bb981486c29dd66fc18504bb0bf957700e091a5e7a6f2feaa40ba5

                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\cache2\doomed\5100

                                    Filesize

                                    9KB

                                    MD5

                                    69b0ca528095116828327c9ed57fd3e1

                                    SHA1

                                    85b159ef092d535f6db1d8b89ad96de3f8e9bc5a

                                    SHA256

                                    a2e2eafa646988aa769ef40f1dff0990c29af53f52a940c91fb408e64b808ae1

                                    SHA512

                                    6bb7769aa8fddbb69f1287b9cdf9c2b3d14aa297f855ea87249f24319e2e4ba6227f2bf903b62100ba4fe6058ac84096e6302e0bd90e1a1887ec5a71499c22ee

                                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\cache2\entries\E8F82FF507585AF8655F245209766BE49794B690

                                    Filesize

                                    49KB

                                    MD5

                                    f00749307e9b14b6fbe2d4f8decea95c

                                    SHA1

                                    416bfb07777d0907221972d0d539dbecf372b5b4

                                    SHA256

                                    6b49cdaddf48cde2c5a3421a00613c41afbb327075fc6f16c7c3641c58692f2c

                                    SHA512

                                    9849f026e2b3999f568c162e3dbd43a3793d0cc183c0334e01ffb11dcdc144c1968f274b2c5fb4b36eb7dba0a418a3d61c7f824676ca238052da7c63f7e01514

                                  • C:\Users\Admin\AppData\Local\Temp\tmpaddon

                                    Filesize

                                    442KB

                                    MD5

                                    85430baed3398695717b0263807cf97c

                                    SHA1

                                    fffbee923cea216f50fce5d54219a188a5100f41

                                    SHA256

                                    a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e

                                    SHA512

                                    06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

                                  • C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

                                    Filesize

                                    8.0MB

                                    MD5

                                    a01c5ecd6108350ae23d2cddf0e77c17

                                    SHA1

                                    c6ac28a2cd979f1f9a75d56271821d5ff665e2b6

                                    SHA256

                                    345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42

                                    SHA512

                                    b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

                                  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

                                    Filesize

                                    13KB

                                    MD5

                                    11f3dba394d91caf9a5cfd69f691ff92

                                    SHA1

                                    4462424428660fe2657ecc2f513d60013ff50d8c

                                    SHA256

                                    e14985572fb58f8cd1e03bcabb5aad1bc4166c701c2fa6b23698d68c0fd678b6

                                    SHA512

                                    80afc2c0219190a283d7013f669aeb5d014c807ed48797eb19a4c20256df1210c2bfcb477ee966cd7797f0db4119ade870f3ca5302e66a1e87adc22ee70e1d3b

                                  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

                                    Filesize

                                    12KB

                                    MD5

                                    01a49751344088a4f12132f0edd99261

                                    SHA1

                                    1ae117cf760b70fb9d14331976b5c10dd670c814

                                    SHA256

                                    2c6e96a7b1ad949c7a9555faf139ec77293afc9a0e5e0f07b3d69ec269420802

                                    SHA512

                                    9e223edd916fbe99b284048b64f997f2b4dff4fd334c4da932d7e0ca097bc5aa66b65a1000e66db1d943ac1be68e1740074dc897bb45978716a14fec762f6cf0

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\broadcast-listeners.json

                                    Filesize

                                    204B

                                    MD5

                                    72c95709e1a3b27919e13d28bbe8e8a2

                                    SHA1

                                    00892decbee63d627057730bfc0c6a4f13099ee4

                                    SHA256

                                    9cf589357fceea2f37cd1a925e5d33fd517a44d22a16c357f7fb5d4d187034aa

                                    SHA512

                                    613ca9dd2d12afe31fb2c4a8d9337eeecfb58dabaeaaba11404b9a736a4073dfd9b473ba27c1183d3cc91d5a9233a83dce5a135a81f755d978cea9e198209182

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\datareporting\glean\db\data.safe.bin

                                    Filesize

                                    9KB

                                    MD5

                                    1ceb1b954f4d0e2ee1437ea63b407282

                                    SHA1

                                    bb3eb8373cd702ce4bb887a111f16c523e18a1ad

                                    SHA256

                                    fbb392a5d55a6967e86d0ad1bc638699db6cd17ab36903d191f33ebce4bec23c

                                    SHA512

                                    584ead6c5eb497263d11571f8398f869252494d3f3cfab447e7dda55eb4634cc539aef86bf3b158faba521690b3b98bdc680dfe7f6c36441f059597740cc7ea8

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\datareporting\glean\pending_pings\5c3dd8f2-ca02-4a0f-a42e-2c206a42351e

                                    Filesize

                                    734B

                                    MD5

                                    c6976bbdb56ad4b91af3fa850d99f837

                                    SHA1

                                    32a6c6abfc5713545399ca7417b220efe788ecd0

                                    SHA256

                                    5499470c2b6cb2b946e7e927ef482bd3a65ea623fb828a99d316751d14104ff7

                                    SHA512

                                    c0e3d56c7f72cd17c0624faf09cd3a882cb0e22dade63af7ea0b06eb3f4bb056b8585ba15b2712931b8bc28f57fcffdb00c39d99d98a3e85fb3effbd769bba61

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\favicons.sqlite-wal

                                    Filesize

                                    352KB

                                    MD5

                                    11583f2d087be7a1c5f26a0b61a99c81

                                    SHA1

                                    5a8d9a2180f4d6f9c6321d230ff73b13b3258dd9

                                    SHA256

                                    6bb5d6548d038354f71ddb939a9126637ae1d7dc9c661bbe36dd42123d883bc7

                                    SHA512

                                    9e70d333dd35ebf8b5f14d71bfd31072f7593a00b2ce95ef1f838bfc2105a9914947a07ac7ba76990683fcc01b9a83ca452731dd47740cd3ef59e785ece4f984

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

                                    Filesize

                                    997KB

                                    MD5

                                    fe3355639648c417e8307c6d051e3e37

                                    SHA1

                                    f54602d4b4778da21bc97c7238fc66aa68c8ee34

                                    SHA256

                                    1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e

                                    SHA512

                                    8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

                                    Filesize

                                    116B

                                    MD5

                                    3d33cdc0b3d281e67dd52e14435dd04f

                                    SHA1

                                    4db88689282fd4f9e9e6ab95fcbb23df6e6485db

                                    SHA256

                                    f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b

                                    SHA512

                                    a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

                                    Filesize

                                    479B

                                    MD5

                                    49ddb419d96dceb9069018535fb2e2fc

                                    SHA1

                                    62aa6fea895a8b68d468a015f6e6ab400d7a7ca6

                                    SHA256

                                    2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539

                                    SHA512

                                    48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

                                    Filesize

                                    372B

                                    MD5

                                    8be33af717bb1b67fbd61c3f4b807e9e

                                    SHA1

                                    7cf17656d174d951957ff36810e874a134dd49e0

                                    SHA256

                                    e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd

                                    SHA512

                                    6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

                                    Filesize

                                    11.8MB

                                    MD5

                                    33bf7b0439480effb9fb212efce87b13

                                    SHA1

                                    cee50f2745edc6dc291887b6075ca64d716f495a

                                    SHA256

                                    8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e

                                    SHA512

                                    d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

                                    Filesize

                                    1KB

                                    MD5

                                    688bed3676d2104e7f17ae1cd2c59404

                                    SHA1

                                    952b2cdf783ac72fcb98338723e9afd38d47ad8e

                                    SHA256

                                    33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237

                                    SHA512

                                    7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

                                    Filesize

                                    1KB

                                    MD5

                                    937326fead5fd401f6cca9118bd9ade9

                                    SHA1

                                    4526a57d4ae14ed29b37632c72aef3c408189d91

                                    SHA256

                                    68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81

                                    SHA512

                                    b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\places.sqlite

                                    Filesize

                                    5.0MB

                                    MD5

                                    a89f683c90345eb75e1390abd9f0475a

                                    SHA1

                                    c108d2d30bd4b44ed4728eb5a2e51c891c5a5972

                                    SHA256

                                    21920efd2a39d2025890e79e2718b0a2478a209163ec2023eb6b30da015eb9e8

                                    SHA512

                                    2e810826bc318041169c25fe17b7f7a4bdbbc1728458befba447a83779d3ff1ab21ba5c2b35eb72a0b0afa6cc2aaf9f0e3fe328510972e7126462f7d518b3fed

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\places.sqlite-wal

                                    Filesize

                                    2.3MB

                                    MD5

                                    583170a99ebda03c8c5564ba7d4a4427

                                    SHA1

                                    f6247627dfe938a77ad98f7c8767c446b71e3cce

                                    SHA256

                                    3245029b0a16f29a61e8d860a0ee4604bed3dbedd0d771ff4deb6c6c6bf23416

                                    SHA512

                                    166aea52febf3412d7ab59d421b512b3092db6556a63e3f3cfeaa36f963e44dc70f6fa753559e199f5dbdaf92e644e3f9da027fc1420416c763aa84a75fd50a6

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\prefs-1.js

                                    Filesize

                                    7KB

                                    MD5

                                    fbdd3ae0e1ba850361c3851a19ac1d95

                                    SHA1

                                    f012a8799edb7a2c0eb4175d9eb99b9f03410104

                                    SHA256

                                    4f13ac99e73a47c51c3590d83a1eb1d346c9a0ab222101fc59d40bf23e85931e

                                    SHA512

                                    affc9c25b20b1dd5d2a0c33497fbfc02ec6ef4229c07e89d65fc8f629ea82d7e8029614f4cb142ae8d073c09d5a4d704c07d0b4ce216eb19884cf383335880d4

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\prefs-1.js

                                    Filesize

                                    7KB

                                    MD5

                                    9ea2702832c4f41faad7ae49e871069e

                                    SHA1

                                    d18aa10379549472d8afbd0b342b899059f4366b

                                    SHA256

                                    462bc3561a7673e3e905e50c3b0a05d5f1f14c3c0704c42a2831abdbc3e1553d

                                    SHA512

                                    e44f8d29b153ba4a101ad7a1344e66b6a0034acefb6670f23b807bb8e02d7b5de23cfacd59e2b45ea9de0e0a4a522687d1833e4c5149ee80e465159381cc7aa2

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\prefs-1.js

                                    Filesize

                                    6KB

                                    MD5

                                    750f374e7fa017a8cb46766f73e57ee5

                                    SHA1

                                    06c8a0a70055651e285e4d89d3d8e6ed6aa6f5cd

                                    SHA256

                                    331bbbb1acd57bacbbb83327c771ca02b81a67da70e86d89c7c897de4ae9e007

                                    SHA512

                                    e94cdc48826328e35bf6fd8e0612a10aa188e0bd9082f6c4c9cb3fc5e2004be343653f385c4910b38aff4652663b28cae4a736c872aad2b84395df7e4001a979

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\prefs-1.js

                                    Filesize

                                    6KB

                                    MD5

                                    2538d0508032c86144aeba4f350c6fdf

                                    SHA1

                                    b8ad3c06d8aea5e09e6b59557dc09f15191e045f

                                    SHA256

                                    c779dc50ef8d5c35f09921f74c084439d01bae1809ca0dcbfa893393d387ed76

                                    SHA512

                                    a7f322d9acfdf468f069de0d9884aa52cdd592f288e0b151a79d81fb87b2de80b5180a92e4c0c28fd6bac8d1e0df9343f6d6d2eb0a87dbc7fced37643647a9ce

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\prefs.js

                                    Filesize

                                    7KB

                                    MD5

                                    686cfa4348f8dccf172842f4da250f84

                                    SHA1

                                    ecc50fa7af07a71c03c8003c7ce4e7c7e468865a

                                    SHA256

                                    38cf88bab372c0ddc878fa9c8a607bda0e957215ef815abd62582df3213ca2d1

                                    SHA512

                                    3e509bda51df32dc1610fe35d8cb7bae824c79713ccecc533b8dcd8ef0fa4b912d256d649f3751cd9adbadbefc80f471fe766e194e7f8be3ca6171a0f03f5771

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\prefs.js

                                    Filesize

                                    6KB

                                    MD5

                                    f92708e281fb4822ffb6ab2b7337c288

                                    SHA1

                                    7b6f654c4d51b21361c0dcf13cb0fde75243c4fb

                                    SHA256

                                    fbca720dc3767a30a27bc7bb41994e48a97236a9d7ff60987c6aa61a039c0d72

                                    SHA512

                                    8ef05898f0f220f9ddc087c928ede1a195d2409e34100fad5e68cec39f48bced5b01e6ee92516c2d22aefa1897c5f190e42758bada635e3d6051ac9e43c2b93d

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\sessionCheckpoints.json

                                    Filesize

                                    90B

                                    MD5

                                    c4ab2ee59ca41b6d6a6ea911f35bdc00

                                    SHA1

                                    5942cd6505fc8a9daba403b082067e1cdefdfbc4

                                    SHA256

                                    00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2

                                    SHA512

                                    71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\sessionstore-backups\recovery.jsonlz4

                                    Filesize

                                    2KB

                                    MD5

                                    040f0f2f0bd3d6adbd9523b2d7bf39b3

                                    SHA1

                                    bf94fa5f3190c94e6136833720fe3368901ad6dc

                                    SHA256

                                    75011940796215d3934acfa87c0ac631b90dc6d4a7e658b39cd6a2f9d0e79191

                                    SHA512

                                    32e3498891cbf86d64c383bae08a7095491025cfce7f4c266d7ca134647d82fc35a8467651f71cb401cf380315f48b0fa1c730555de2c22503c467201425c453

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\sessionstore-backups\recovery.jsonlz4

                                    Filesize

                                    9KB

                                    MD5

                                    8b5c6c3701ef87a868d518f40855574e

                                    SHA1

                                    a20f0b9e51fd97f75ee0103729b00d418641d65c

                                    SHA256

                                    d65c99ad799eb309c9c327aea4c0a2313531ce43a473d39fa1b5b60681957691

                                    SHA512

                                    5615771d210c8f8e4ab1fcfd670babb0af3e62609ad3867b68b8cced2c5b5abb9ed4016f39a01c4c45103ae2bc77773e5e3e9f8e127718c418a8c89719c62b75

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\sessionstore-backups\recovery.jsonlz4

                                    Filesize

                                    4KB

                                    MD5

                                    4e18d424df6caacb92033ae962a4000c

                                    SHA1

                                    f05ad8d3bc0c7c07b1527dfee1f443c7273217f1

                                    SHA256

                                    b575a7e51b504e7b73eaacd210c356714238674725499672be019a14cc5f15c6

                                    SHA512

                                    3a7c30c23f21d86dc5ca79e245b75221776c0f7f711d481a4ae8781ba2df6643ebf20a9f70c29033321a059996f0b88d91fc51408878e72ed441681bce4a19f8

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\sessionstore-backups\recovery.jsonlz4

                                    Filesize

                                    9KB

                                    MD5

                                    b22c1bf2a2e7728ed7db41414e6425c7

                                    SHA1

                                    02124aaecf5a566129442e964dd62d9a8504f88a

                                    SHA256

                                    aa6f0be54704cbed9fff08ce94dff59eafbdea8f877bdaf0b8fe340a3d845a84

                                    SHA512

                                    dc6d8e2391e086dce3c4ea5fe292f76dcc2fdb9d4b403289242dcdf622e67aad8f3da6f152a3fefa1d31ef61806c8f7fbd434ec81dfe8ebb50633521aa7f9c4d

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\sessionstore-backups\recovery.jsonlz4

                                    Filesize

                                    10KB

                                    MD5

                                    dca1a2c5de646a8baccc30db8ddb0667

                                    SHA1

                                    a66246c2d494aa1ecb0253c416247b36968de9c8

                                    SHA256

                                    2a165738eb9e80d393ce13aadfdad9aad1b135aafa4547825a0e74ce66e0eb53

                                    SHA512

                                    022dd633227871331497f139da06a32696c5ba689d1280483f0afc01d8d5aa5b7599ac78de3149dd3b0e46224ae126ec19e1cc08ba94bd745dad5b1b6aca0a99

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\sessionstore-backups\recovery.jsonlz4

                                    Filesize

                                    5KB

                                    MD5

                                    d17bc80b3ca8555057a404d04c193a6d

                                    SHA1

                                    51a8bbbcfa4bae004ab2c9aff4632594d18007ba

                                    SHA256

                                    3af783b1a8b38d6eb48a74e5d2693423127e61d5a90430ec2af21b44194c1977

                                    SHA512

                                    973463b88b06fb0e19ebcd53b93e69da70c2a7c4add5507357f7c72b0e71bcdc77e20bed0c8869170f1dfa44e28380e3842a098575946380d23b9fbe795bad21

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\sessionstore.jsonlz4

                                    Filesize

                                    4KB

                                    MD5

                                    9bfd17d0c091c75fd53aeff4fb9f2413

                                    SHA1

                                    cf34863137402c64aebc4ef1f6fbd40b1dba40e9

                                    SHA256

                                    01fc9c9d1b0df599c44f020c1ffdd24f90bec1ff921674d800d0ed448dd3c80e

                                    SHA512

                                    f07fdf8b30eca3bec90c32fb38e7f8df6380a56386e4b1619b1d2b7bf10b079a2d47dcdb27215fa94d6a357b0fe5d91f17689ecc124d3ee2b498a03ed0351a05

                                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xh4b7nwe.default-release\targeting.snapshot.json

                                    Filesize

                                    3KB

                                    MD5

                                    09f681a704aa6163c166ce15fad12d38

                                    SHA1

                                    a788d32b29b63394146fe7e906a60d28acee239b

                                    SHA256

                                    9bf769cc093e30ca70cc91419291f64faad3a48d316624d80ecdce4334db8641

                                    SHA512

                                    2a5808e2b29bb1159689f9e204149bea670a1fc118abbea8e08ec11b090bd94e7b1a105a99a6e08474044b657355f742aeebd71197c9b4497ba82d7a35eb0a33