0f1498995be34d376ec02642e44826737ec38e18686da4395a36f1c6797b31d2

Analysis

max time kernel
67s
max time network
70s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241023-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
20/11/2024, 14:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a1f84ffd55a9cb76e82e5872abef73c2e3e1a1a1.html
Size

13KB
MD5

bd2c3d1d6c3035bb233ca37e3e01c7db
SHA1

b30f55edd8a24bd2cccb30cdb3dbcde775e15ce0
SHA256

0f1498995be34d376ec02642e44826737ec38e18686da4395a36f1c6797b31d2
SHA512

203098b7c50e5c05ac81faabcb109d90dc4961fba96f35e1acff177899cb1f207a9beaf94481371f0e0ca223ccf39f419bb39059ee75ae75d516845fd9f2dfd5
SSDEEP

384:JgsIhIlDDFDBhIhIs/IhIMX/IhIMX/IhIhDX/IhIdizfN+ei+ei/IhpiFDsi/Ihz:JgsIhIlDDFDBhIhIs/IhIMX/IhIMX/Ie

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	2348	firefox.exe
Token: SeDebugPrivilege	2348	firefox.exe

Suspicious use of FindShellTrayWindow 21 IoCs

pid	Process
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe

Suspicious use of SendNotifyMessage 20 IoCs

pid	Process
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe
2348	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1132 wrote to memory of 2348	1132	firefox.exe	83
PID 1132 wrote to memory of 2348	1132	firefox.exe	83
PID 1132 wrote to memory of 2348	1132	firefox.exe	83
PID 1132 wrote to memory of 2348	1132	firefox.exe	83
PID 1132 wrote to memory of 2348	1132	firefox.exe	83
PID 1132 wrote to memory of 2348	1132	firefox.exe	83
PID 1132 wrote to memory of 2348	1132	firefox.exe	83
PID 1132 wrote to memory of 2348	1132	firefox.exe	83
PID 1132 wrote to memory of 2348	1132	firefox.exe	83
PID 1132 wrote to memory of 2348	1132	firefox.exe	83
PID 1132 wrote to memory of 2348	1132	firefox.exe	83
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 4248	2348	firefox.exe	84
PID 2348 wrote to memory of 3672	2348	firefox.exe	85
PID 2348 wrote to memory of 3672	2348	firefox.exe	85
PID 2348 wrote to memory of 3672	2348	firefox.exe	85
PID 2348 wrote to memory of 3672	2348	firefox.exe	85
PID 2348 wrote to memory of 3672	2348	firefox.exe	85
PID 2348 wrote to memory of 3672	2348	firefox.exe	85
PID 2348 wrote to memory of 3672	2348	firefox.exe	85
PID 2348 wrote to memory of 3672	2348	firefox.exe	85

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\AppData\Local\Temp\a1f84ffd55a9cb76e82e5872abef73c2e3e1a1a1.html"
1⤵
- Suspicious use of WriteProcessMemory
PID:1132
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\AppData\Local\Temp\a1f84ffd55a9cb76e82e5872abef73c2e3e1a1a1.html
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2348
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1972 -parentBuildID 20240401114208 -prefsHandle 1900 -prefMapHandle 1892 -prefsLen 23681 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {486d6cad-789f-415a-8a5c-02f11497af2d} 2348 "\\.\pipe\gecko-crash-server-pipe.2348" gpu
    3⤵
    PID:4248
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2416 -parentBuildID 20240401114208 -prefsHandle 2396 -prefMapHandle 2392 -prefsLen 24601 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {336532eb-3c31-4fef-bb7d-66727409b745} 2348 "\\.\pipe\gecko-crash-server-pipe.2348" socket
    3⤵
    PID:3672
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3124 -childID 1 -isForBrowser -prefsHandle 2988 -prefMapHandle 2984 -prefsLen 24742 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1f9a2a49-911b-4332-be4b-089f3c97819d} 2348 "\\.\pipe\gecko-crash-server-pipe.2348" tab
    3⤵
    PID:3800
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2996 -childID 2 -isForBrowser -prefsHandle 3616 -prefMapHandle 3612 -prefsLen 29091 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {54304030-6ecb-4b46-9a53-3991ea2a1139} 2348 "\\.\pipe\gecko-crash-server-pipe.2348" tab
    3⤵
    PID:4800
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4968 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4964 -prefMapHandle 4960 -prefsLen 29091 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7144e30e-3204-4849-bf51-aeadc960c877} 2348 "\\.\pipe\gecko-crash-server-pipe.2348" utility
    3⤵
    - Checks processor information in registry
    PID:3648
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5348 -childID 3 -isForBrowser -prefsHandle 5296 -prefMapHandle 5340 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3718db81-d3f4-4473-a4ec-adf263839517} 2348 "\\.\pipe\gecko-crash-server-pipe.2348" tab
    3⤵
    PID:3264
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5576 -childID 4 -isForBrowser -prefsHandle 5496 -prefMapHandle 5500 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4712d1ab-b346-45bf-b3ce-a90c602335e8} 2348 "\\.\pipe\gecko-crash-server-pipe.2348" tab
    3⤵
    PID:1008
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5680 -childID 5 -isForBrowser -prefsHandle 5688 -prefMapHandle 5692 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {787e9fd4-3b6d-4aea-90ff-a46bcfa64084} 2348 "\\.\pipe\gecko-crash-server-pipe.2348" tab
    3⤵
    PID:4500
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3268 -childID 6 -isForBrowser -prefsHandle 3436 -prefMapHandle 3440 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6319281f-4ba4-4e8a-8076-6f97b1088236} 2348 "\\.\pipe\gecko-crash-server-pipe.2348" tab
    3⤵
    PID:4752
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5996 -childID 7 -isForBrowser -prefsHandle 6004 -prefMapHandle 6008 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {22100ad8-f21f-4288-aed8-edd99c41cb09} 2348 "\\.\pipe\gecko-crash-server-pipe.2348" tab
    3⤵
    PID:2564

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\tmpaddon

Filesize
479KB

MD5
09372174e83dbbf696ee732fd2e875bb

SHA1
ba360186ba650a769f9303f48b7200fb5eaccee1

SHA256
c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f

SHA512
b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

Filesize
13.8MB

MD5
0a8747a2ac9ac08ae9508f36c6d75692

SHA1
b287a96fd6cc12433adb42193dfe06111c38eaf0

SHA256
32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03

SHA512
59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\AlternateServices.bin

Filesize
7KB

MD5
5abe2f6f0d6e9cd6bb3c7ff0f383b675

SHA1
77a45e8e05c2668c8b05acc79b0aa58c065d0da2

SHA256
4c4f9f26027b069b4a92cbd825143ddb5aa40a604470d48f52185fdea7c198a9

SHA512
123c9222a3d84c2164035b2cbaefe8ecee6e0f4ff2d7867b27a5ab384bc9b22e011a958fc4762eadcdae94016902fe2620db7fbb9b784f82b41c735bd31a1887

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\AlternateServices.bin

Filesize
17KB

MD5
829c5b382a62e449fc33da559be45efe

SHA1
8a680c70dcbb82ef2f6918aad9561ef62e83035e

SHA256
e0434d2990c55173aed2951f1b4d4a9ce100e8378229f63cd4bd6d0f81939f08

SHA512
db8b5790345cb0e6ba6da6e21d69183d186a33b6503301b152691e41c78ca1481264473183702e8e4c19ca26f74a7f8faa10a392dbd1676ad17ede94b71eddc2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\datareporting\glean\db\data.safe.tmp

Filesize
5KB

MD5
4c310ba1c9c2461c55421dea75610926

SHA1
2092411f6624affebdca1ecfe0862bb67af71411

SHA256
45135d1f0ade1d55174cd3eb4650d53345b6f539b737e404bff172209c103d6b

SHA512
fb3e6005299567715e0f3ad1bdfd394b72968268caf7fd43e79a614cce081ce8db2726639f6856270eda4f5bae88719de7f9a261cb76dcca05e518f24758f688

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\datareporting\glean\db\data.safe.tmp

Filesize
3KB

MD5
7c6458bd74d8ab0a06b6c7d974d3f95d

SHA1
81423c797cf6e938de0cd2ccc3790380b37f2b59

SHA256
f96a380d5c1f22f7dd07088095b9ad6261ba2eaedf90c4fba1eb3d8d7c16b49b

SHA512
a8c2216ab76271449c3901098841c601537b6f3fe500d0851f7791297763b1a6eae34d08246168d90168322ff38b5bfb32714d3534b5c4c42ac5796d604e73e6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\datareporting\glean\db\data.safe.tmp

Filesize
6KB

MD5
715fc35614e30eaa192da8b5c1311d1a

SHA1
5f0fbe0fafc1c5389b77899c67bba35b4cb40644

SHA256
046be06a7c75ed9d127c1f5b361b2161fcf854da8adadf931e898b1290cf16d6

SHA512
720e12aeed6934d035db15e4abb980797adb68af5c36b8955fb3e43ac327e79c17297b1a70b775f567b24c82335cfea2164abbe43532ad86ced49cbdc3f037d2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\datareporting\glean\db\data.safe.tmp

Filesize
37KB

MD5
c9f1fe03584000d6768da0b572f5a3dd

SHA1
92d83fd0cba0b41c2a3e01743a59374ab3bed744

SHA256
8e6d6474af1805135d664193bc055011521d0dd91140d26cfec0d17227fd1a76

SHA512
4a79c83895ac209faad607292058e30dffb67b8a7be4375e7bd63729df31b9581b7595146b0cbd6d05ba816aa20e3bc3ffb4902cf01002e5d8c7cc76871302ef

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\datareporting\glean\pending_pings\3a2a01f7-de35-43ab-a2c1-29d24eec1846

Filesize
671B

MD5
ce17af8b04f3794eece0e773d747241d

SHA1
4bd09afc7cb4044e86cfc7f7a48483c7177b1e79

SHA256
32bf5793d7937a031fcdaea109a5f9b1d42458573d8c53456baa7738d1abd8b8

SHA512
dda8c16603df1e3d3ccc75c2b9c6074245dd2cd59bbf318d49739fd827f07a517975a98407d1d0b335d18a31b7e9368d4370a46cc7fb44d3a8108118f3e070af

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\datareporting\glean\pending_pings\c352bd3e-f7e6-4b18-aa9a-997d11740358

Filesize
982B

MD5
dd92c6522f6fec6e54710229b54ee8d9

SHA1
dfe8978683802a755c7dc7beac2be424fb48c958

SHA256
37abfaf6217f6de7271a4183085dda341ac0201c24eab25477b890ed192bf710

SHA512
c85a8a83e962c463e74b5801e87826a948fc8e7ff321c448c22e453974aa2df4380c13e8fef27fefe17dbd43187a29d550838f11f44d5a815a4852c7a2083a9f

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\datareporting\glean\pending_pings\dbb3e4a7-1b00-4866-be45-7761f25b2e5b

Filesize
25KB

MD5
1b6f2c5309f622bba043fb11d55cf899

SHA1
4cf50864cd4253d01250ec6c74b416093149c0bd

SHA256
45051eada2833bc98e06835aaa65ee7be8e0bbbfb84123d4b7f6f08e5e6472fc

SHA512
e9ed0fa530c886c1fb8b90c43e9edf497914d0cda0fdf4bbd80bae8d2c15414a2f1c8602156a506fcbc6610bf7854a38a6f8044046d9a1849d5fcf6e9f17ebb3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

Filesize
1.1MB

MD5
842039753bf41fa5e11b3a1383061a87

SHA1
3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153

SHA256
d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c

SHA512
d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

Filesize
116B

MD5
2a461e9eb87fd1955cea740a3444ee7a

SHA1
b10755914c713f5a4677494dbe8a686ed458c3c5

SHA256
4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc

SHA512
34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

Filesize
372B

MD5
bf957ad58b55f64219ab3f793e374316

SHA1
a11adc9d7f2c28e04d9b35e23b7616d0527118a1

SHA256
bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda

SHA512
79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

Filesize
17.8MB

MD5
daf7ef3acccab478aaa7d6dc1c60f865

SHA1
f8246162b97ce4a945feced27b6ea114366ff2ad

SHA256
bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e

SHA512
5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\prefs-1.js

Filesize
11KB

MD5
8a65adb9ea64b744885762760024f778

SHA1
e21aad7898726af84f816392760c556e26ba635d

SHA256
a7c63ae5f20696f5701d6603c0821889e6bd9344bf6f00495cfe5b9a4d79181d

SHA512
057af62d32d7f7dba62fed768de7586e7fd0c050eb9b391c890b22d2bb880cad1cfe0bd57882c450b739a2bd8e3ab2b04313e1449a80ca7cb0839e4836ec4b5d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\prefs-1.js

Filesize
10KB

MD5
346760c3cfe2f07150dc250b07ed4bc9

SHA1
8380e92430b6a20b2dfcf93a0f8d368ed8f509eb

SHA256
eff4064a51d0f482d9665720232cb529d559ac920855031f217ad3e353814807

SHA512
eb375b2e7e42ad7ba37586c20acd81af586042fba85632ae7b32c9ebb15dd0f65eb5fb9d40d3436265f6dcf360a5e21953919667483521a5e7afdab552e951d2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\prefs-1.js

Filesize
10KB

MD5
cad56801cb57327d22578b92b3b5d444

SHA1
9a0068c1abf6ae3597d55c54262f180b600ea412

SHA256
bad9b04501ee05382bc055b89c2bb24743d0bc27786e805214c8f11c4dd477dc

SHA512
cc209c3f40a75960137dd44e7aee486bf5352be4f4bdd6a9402e56a005de67f2ff7537e1e76ac2839d3d53e5603237c977486142fc0575d1909c71e409da69a0

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\prefs.js

Filesize
10KB

MD5
609b53a1768de8d7ad1b968848e3327b

SHA1
99ffe785ff4f146d3b339eedd2dff20c9deeed43

SHA256
c784285f3e82b40762dfa15cbd81e47d6c9150b594d1be1c21d73578db683a66

SHA512
2d4428df9d63bcaa998212c63ffa1188a3ff98e9f409ffc985244b22034cf8a96bfb7285f66123b0d66061533ab4ad74c2ef98cceec4786bd796667bac01489c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\sessionstore-backups\recovery.baklz4

Filesize
1KB

MD5
91ee4a15886e79fce6cf9da5327a728b

SHA1
b72b866484c99773f2e444956e0b4a2d2ac6378e

SHA256
9031ce8909133b55a7ac77186fc7c242cd0abc2178597b23deb8c202f235843b

SHA512
c7896a85e4a042336c0a4e9ef20bfc1cc1c22d550b259264d2a5e7fb96443817efbb75ba8f9e9e5b0aa4155e26221837d800b4fbcae30a51ffa4687d31738661

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\sessionstore-backups\recovery.baklz4

Filesize
2KB

MD5
d847a2165686555570d77df7b97e69b3

SHA1
fd28187779a6af795a0fea5a4ffdb03f0fd9af2c

SHA256
6f25d7a6e435fe03d63313fbd4680013afe38339d87639a7df5cbd36d35bc33b

SHA512
641d2ae5240012f03338521f1da75817ba98f91060e5989b58328100db909a0dd767e4eb2d4e89dfca4a928894c30ef7f90ee172268708c09c2289f3ca1177a3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2dtnzpu.default-release\sessionstore-backups\recovery.baklz4

Filesize
1KB

MD5
2447fbc40aad8d5eb72d58f309fe158a

SHA1
6e9c529ff697e10edc1fda0cc861a4c81486c910

SHA256
0d76abedca1074f1513a41b5a026a040255be054b49e21a2474d7a0471f2ffdc

SHA512
17610d4f05c356412230fc3cac4428217a2ff2f3f2bbd7fc2690bf1c21a2837b40c8545fa46c1bd76a7a35bcc74b25721227042d2f05651341c05f291d131f3d

Download Submit