hxxps://studysync[.]co[.]uk

Analysis

user interaction
yes
max time kernel
5s
max time network
49s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/10/2026, 13:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://studysync.co.uk
Sample261002-qt931sys4n

Score

6^/10

persistence

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
149	raw.githubusercontent.com
150	raw.githubusercontent.com

Checks processor information in registry 2 TTPs 18 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	3452	firefox.exe
Token: SeDebugPrivilege	3452	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
3452	firefox.exe
3452	firefox.exe
3452	firefox.exe
3452	firefox.exe
3452	firefox.exe
3452	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3452	firefox.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4340 wrote to memory of 3452	4340	firefox.exe	81
PID 4340 wrote to memory of 3452	4340	firefox.exe	81
PID 3452 wrote to memory of 4076	3452	firefox.exe	82
PID 3452 wrote to memory of 4076	3452	firefox.exe	82
PID 3452 wrote to memory of 4076	3452	firefox.exe	82
PID 3452 wrote to memory of 5064	3452	firefox.exe	83
PID 3452 wrote to memory of 5064	3452	firefox.exe	83
PID 3452 wrote to memory of 5064	3452	firefox.exe	83
PID 3452 wrote to memory of 5064	3452	firefox.exe	83
PID 3452 wrote to memory of 444	3452	firefox.exe	84
PID 3452 wrote to memory of 444	3452	firefox.exe	84
PID 3452 wrote to memory of 444	3452	firefox.exe	84
PID 3452 wrote to memory of 444	3452	firefox.exe	84
PID 3452 wrote to memory of 3232	3452	firefox.exe	85
PID 3452 wrote to memory of 3232	3452	firefox.exe	85
PID 3452 wrote to memory of 3232	3452	firefox.exe	85
PID 3452 wrote to memory of 228	3452	firefox.exe	86
PID 3452 wrote to memory of 228	3452	firefox.exe	86
PID 3452 wrote to memory of 228	3452	firefox.exe	86
PID 3452 wrote to memory of 228	3452	firefox.exe	86
PID 3452 wrote to memory of 3004	3452	firefox.exe	87
PID 3452 wrote to memory of 3004	3452	firefox.exe	87
PID 3452 wrote to memory of 3004	3452	firefox.exe	87
PID 3452 wrote to memory of 3004	3452	firefox.exe	87
PID 3452 wrote to memory of 5692	3452	firefox.exe	88
PID 3452 wrote to memory of 5692	3452	firefox.exe	88
PID 3452 wrote to memory of 5692	3452	firefox.exe	88
PID 3452 wrote to memory of 5692	3452	firefox.exe	88
PID 3452 wrote to memory of 5708	3452	firefox.exe	89
PID 3452 wrote to memory of 5708	3452	firefox.exe	89
PID 3452 wrote to memory of 5708	3452	firefox.exe	89
PID 3452 wrote to memory of 5708	3452	firefox.exe	89
PID 3452 wrote to memory of 5716	3452	firefox.exe	90
PID 3452 wrote to memory of 5716	3452	firefox.exe	90
PID 3452 wrote to memory of 5716	3452	firefox.exe	90
PID 3452 wrote to memory of 5716	3452	firefox.exe	90

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://studysync.co.uk"
1⤵
- Suspicious use of WriteProcessMemory
PID:4340
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://studysync.co.uk
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3452
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1972 -prefsLen 27097 -prefMapHandle 1976 -prefMapSize 270279 -ipcHandle 2036 -initialChannelId {3925225f-6813-4675-8e96-3b4fc13a1975} -parentPid 3452 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3452" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4076
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2432 -prefsLen 27133 -prefMapHandle 2436 -prefMapSize 270279 -ipcHandle 2444 -initialChannelId {90b1855d-c9bb-45e4-a3db-2dadc804ac1b} -parentPid 3452 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3452" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:5064
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3832 -prefsLen 25213 -prefMapHandle 3836 -prefMapSize 270279 -jsInitHandle 3840 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3848 -initialChannelId {ed90a805-c12e-4a22-b86f-bcf4fc691f03} -parentPid 3452 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3452" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:444
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4028 -prefsLen 27323 -prefMapHandle 4032 -prefMapSize 270279 -ipcHandle 4104 -initialChannelId {2639c6b0-2c3a-423c-961c-942e627e822a} -parentPid 3452 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3452" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3232
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2784 -prefsLen 34822 -prefMapHandle 2788 -prefMapSize 270279 -jsInitHandle 2620 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2988 -initialChannelId {db44b3ec-64a4-4572-bfc3-4b3f49158619} -parentPid 3452 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3452" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:228
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5012 -prefsLen 34928 -prefMapHandle 5016 -prefMapSize 270279 -ipcHandle 4988 -initialChannelId {1c09a8cd-5b28-42cb-95ef-f85f7eac93d2} -parentPid 3452 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3452" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:3004
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5480 -prefsLen 32951 -prefMapHandle 5476 -prefMapSize 270279 -jsInitHandle 5472 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4788 -initialChannelId {98b43280-6791-4260-ba10-fd8618c366ec} -parentPid 3452 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3452" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5692
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5532 -prefsLen 32951 -prefMapHandle 5240 -prefMapSize 270279 -jsInitHandle 5476 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2704 -initialChannelId {e8203429-b254-4e13-88c0-a9a22d018d3f} -parentPid 3452 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3452" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5708
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5836 -prefsLen 32951 -prefMapHandle 5840 -prefMapSize 270279 -jsInitHandle 5844 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5848 -initialChannelId {7ee61709-635c-4afe-b80f-7b86523b1fc3} -parentPid 3452 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3452" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5716
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6200 -prefsLen 32951 -prefMapHandle 6204 -prefMapSize 270279 -jsInitHandle 6208 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6216 -initialChannelId {b83cbae9-9339-44c8-8bd6-1270b6dc9872} -parentPid 3452 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3452" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    PID:4484
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6384 -prefsLen 32951 -prefMapHandle 6388 -prefMapSize 270279 -jsInitHandle 6392 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6400 -initialChannelId {926f0e55-faac-4593-af48-48267f8666d1} -parentPid 3452 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3452" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    PID:5008
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6820 -prefsLen 32951 -prefMapHandle 6824 -prefMapSize 270279 -jsInitHandle 6828 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6836 -initialChannelId {fa38e978-27c4-482a-865a-3ac77d57d93b} -parentPid 3452 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3452" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    PID:4816
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4616 -prefsLen 34389 -prefMapHandle 2612 -prefMapSize 270279 -jsInitHandle 5944 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4888 -initialChannelId {8e672877-530d-4a2f-8bef-9e60f3a41b14} -parentPid 3452 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3452" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    PID:2280
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6008 -prefsLen 36765 -prefMapHandle 4860 -prefMapSize 270279 -jsInitHandle 4924 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3016 -initialChannelId {86673c64-f744-47bc-ae78-0db03a375752} -parentPid 3452 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3452" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    PID:1156

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wi9zt29h.default-release\activity-stream.contile.json
Size 4KB
SHA256 72a57ae7cfd2ada8c13269d3a543bb821aaa709dc37ae4e724e1ddd36b8389d7
MD5 fbd824e39b4c92948d436c2f941572c3
SHA1 b51aae76e09e69f8d18ad18af747fd5b224fafdb
SHA512 dab24623030501b7959ed62b2c2121ef58003bd1cc183c6252c195eaeb36844ea18058c9b739b4d6a948a4b552ca5ee93d007e9c9a9703709c1842c59380513a
SSDEEP 48:YdbADreDZTyFWMDLpqJio+Qamqp4JBreDZtyjN1ODQa4Gjy6T+jiR5QfnqtW7s+v:Tm5M5WammsAD5FT+mRqfnygyX4ONolz
TLSH
T107A1F85FD474481A4730F9E66C0B2398F017B012CEF0CB6CB2A69D3661A83AEC1D7889
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wi9zt29h.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 e760ba422069ee05c6726e090c49cfcfa1aba7155ef51398625e1b150a1550cf
MD5 2c38c27a23f215842d8071c6d45ab10e
SHA1 f4bee18b54eb36a2a48fda4be4ed42fe4e98fd9c
SHA512 94b2635dec364c2ec49f9a013ec9ed798836dd9814ddfa0413daa6e13ad9fe543c2d5304c9e84f254b1ff493de657b9e8509611c28babd3ed0b08d8d5b5f4f54
SSDEEP 768:JyESHODVKqDqGKnPtbCu51/CiD32O+KLso80V8l:oE0onqGKnPtbCudCImO+KXel
TLSH
T10273FAE3A6ECB1FB1F9037CB2C4FB95B61E24596E34506C8ECE9C91D81CD654023B5A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16420

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wi9zt29h.default-release\cache2\doomed\16420
Size 12KB
SHA256 5089255e661f099ebec3317d27e1d73dc5f63733b6a0782e811bb42d9d57ded4
MD5 3dc3aa28416d0f389724385e8f890224
SHA1 ecb4931da303aeac2dd8ddfa6adc5433d57086db
SHA512 f81f757d4a79df6c80ad7af905309c9ecd6f4e99e29cf24ea296cce28973eb5617fc36d3b00cfad4211f960836283db3b586e69c79e1b9b1b826f0b9d1904a13
SSDEEP 192:/w9umkzh4ZnpLT2mpfrTmXpZdPfiZUsaaaCN6JXuh1/TkBbS3aSGSe:/TE3He/5qZUq4uh1IsC
TLSH
T1BE429D3F4F753A285D918AF5812E5CAD6D203B43E6C1D4BE7A984A10CCC9BB1AB07316
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wi9zt29h.default-release\cache2\entries\AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0
Size 16KB
SHA256 6495487374cb3c4baec791a90a5d2083efc45b7120790fc65c6ae0767821eed7
MD5 71c4e16c522f967b1c50c3c39edcf521
SHA1 da16343ce725a44bc740f26fd0d04988245440c6
SHA512 0162d865c94c8a0efa22081173e93b25a2863e148174843f8ed9565bb1664c4b81414348f6a2c23872b1a29b42aa818ba654254e7982c3be69eb4085555ba29e
SSDEEP 384:HalwSiO024YLWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMA9L+xS+t:6l8ZYLWTToXJWTTogB7S/AmVAf+hRMkc
TLSH
T120728E7D8F013CAC265790E8C8BA43558D1CB6A7DFF5C06D269C3E09C984A5A71F984F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

B14C76E28E0CBA25AE8D226CCF9BE3D69CF29C59

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wi9zt29h.default-release\cache2\entries\B14C76E28E0CBA25AE8D226CCF9BE3D69CF29C59
Size 17KB
SHA256 d190d8a82316ca7e504027c220077d23a4a4b89ac0f474f4b2fe0c2a28ba131a
MD5 83fd65e487f5b15bdf753b22b1c43b8d
SHA1 f46e8ad6e03a3e6b23673312f93253fc7f5af18d
SHA512 54dc059259d314077deec0e68f2b3bbaa738c005fa459b322a9b35e21740939af2f299e3ebc5f4a8c64f4fb0a2b38f1c52d61c41b37a7d6ddd3ef788d9b12b69
SSDEEP 384:fdnhviZhHoMM9jLJyYu1iGn3EEzqLsfxyxEKaGUzHODWoh1B9M0lpDIIv:fdhvUhHi5XAlzqLsfERaGUzHODxh1B97
TLSH
T1AB82CFB76E206E2D4D9133A6EA5D968D0D19D22BCF82C0A41ED53582C1C17DDF5CC0CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FD3A16D8CAA7C19EBBA598744DDCE44A2080EEB4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wi9zt29h.default-release\cache2\entries\FD3A16D8CAA7C19EBBA598744DDCE44A2080EEB4
Size 33KB
SHA256 759a808239f7d2aff769f7082d25869cef617d8d88ae2c815511c885d524d8a1
MD5 886897e276c8bdfe2fa5ef4554b55f2f
SHA1 0fd3ed7e7cebd69c843059aec389bd4c98901ddf
SHA512 09e4d13456aa64a2f47602b6a51324d3e4d14562106d0f87b0fe4770a6f3c30b3c06a1ae33dce144868c284778109ae7a1308437f779eac4feff006b83ec4c6e
SSDEEP 768:xBR7McRbkn5j12gCp8TCcNacI6xBgk5HSUT8KAvKiw2BlA:xB5MAA1kp8XQ9eulw2o
TLSH
T14DF2E1775F04580E9BD3E7C9928AEC8AAD1497936FEED04D30046BE3D8D52F5385A843
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wi9zt29h.default-release\startupCache\webext.sc.lz4
Size 106KB
SHA256 aed64e64e79e021b2c6d872a9a3f654553fa88bb04286298ce70dde9d7c31de9
MD5 30f83193c11ef636eaeea69797f291c6
SHA1 c137a59d431994e0ccb116c5dcaf8d35dd99fee9
SHA512 2cdbd08e1327c3e2e6d8ec5980d6a3607dfcfb788590902af385b3fc8ee81d4c3cdb04d320eae038529e6f83b81e22a66727e6a078b9dd8a94d642deea3ffc41
SSDEEP 3072:X3lO3Cm7zcejFPQIA3vVTUOky5R9KZsrgJqFtYH:F+NzFTA3+y5RMZsrQwtYH
TLSH
T135B3AFF6DFA2C93D68FF902D9A82853EFD262404B3A73019C923675462C6BBC7774644
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wi9zt29h.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 cefc8a6633d95cd77df4fa583f8635a5c6d17027a45a7fee25e07a88cda76d3e
MD5 70a2e170c9a3385c7b61fd7300387c40
SHA1 cf823020ead2f950701a9bf2055efc9bba101b3c
SHA512 b2b8b3bc3a6bc67e022fb16252f8ddb2136cf8ed5433bb4b2cbb0e01f6cd2a04a78b27d8ec75b79d2e0df26306e3c984ea790daec7589e78464155fc8814a41c
SSDEEP 3072:j3lO3Cm7z44aaP/ml3vVLUOky5R9KZsrgJqFtYA:p+N4naml3iy5RMZsrQwtYA
TLSH
T130B3AFF6DFA2C93D68FF902D9A82843EFD262404B3A73019C963671462C6B7C7774649
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\AlternateServices.bin
Size 8KB
SHA256 49bf8f94b1aefe79043e87aa4660801980651c2548dc91089f146eeab772aaa4
MD5 95777746adac0726912e7885a6f14844
SHA1 503c0c6eec9a29bc000a1762934f217eae167e8c
SHA512 487aa44791ee2d927649e76d96b5add90861b0f8b4ebdaa0b437420d80f3be8d281b1ee7084821873f6da8a3a7d4cd093231ef85935f122fb80b1d6c94622940
SSDEEP 24:0uhMZnSokTRyo8hI3qTVezycTBK9T1vL+sRTx5UIV9S4R4Thf4RzRh:QSyMnzx+Sykyt
TLSH
T16202F7FB4371B231F0516FB0406AB5E99C27015A69E9414F4BCDE4F243C16E4A1EBB18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\AlternateServices.bin
Size 25KB
SHA256 3e8ef02a8f3a7f8948dacca29487bb924ac973b71a6b1dfbcfe488a9a4037cf1
MD5 b879550d657210aeaecff6814b972272
SHA1 beb5014b8b2e41457faa3382507e3b9c39d1af23
SHA512 71e2477e523c8c55588a00de34c102fcd4d312a6ae5cc83d9cb1670b74df1359eee44ba08da5d40a749ab4560d8dfca9840d0a0708c2800cf531f824fb515a81
SSDEEP 96:GnzcUvtZEpEbEMbV3GfGbGcKk+g2B3ZP4pky:PUvtm2gMbVLKk+g2B3Z
TLSH
T10FB2F8FB13B1B132F0516F7040AAB5A99C37014A59D9568E8BCEA4E643816E4A0EFF19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteSecurityServiceState.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\SiteSecurityServiceState.bin
Size 1KB
SHA256 0033b97545642559a2b3a8febfd5fcd97d0ffdf82e57d1155efb3c22a07f0f88
MD5 5c7aa853a430915c03e57a560dc1b4c1
SHA1 fdfcc031aecc94a4ff2751349e6f25e18b3249a8
SHA512 e3f480c8b952f4ea9f7c33601cc4f3ef30ade235f161cb17585c8600d333e4ee8376df454c95c953493f782ee2ded96faf278b42c529218aba90942d42a21e8b
TLSH
T1BC21C23A4AABC121F0E10A3C389C88600E25334761E3F0783EB1429530B4FA934DE552
MD5 SHA1 SHA512 TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\addonStartup.json.lz4
Size 4KB
SHA256 d71671941d0aaaaf5d8abbae33a808339acad44f90e8e0b9b66440fe0c90e4bc
MD5 96663af01c80b0650b50b41a94bf4eec
SHA1 a36f57f50fe8c8e2e4af34e09adc57f0f8d80ee6
SHA512 c12c7da10aa95d4815fe393c82c69401889a05e462d2c45a9f6be6ac45c4172798e5a55042b2ee6d90dc01762fa394c412e06963ff7bb06108cedf17f5cd6457
SSDEEP 96:N0O4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:Nm52xxhD8rGvm6ApwnHUuhN
TLSH
T1D3A17EB6D581EFA2FD31C0435CD53FB2EA969B7414A9C4D0F16E71194C64A731705340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 213fd6d1abfa142c573d67a9f2d2b8908dda1e3c3556a663c5fbd9d4a2dd86c9
MD5 19c39fd8d0177f58d0e79f3b97e70d6e
SHA1 42808ae4c0d4b97efe40357ba984952c943a9b2f
SHA512 7cfa70141c323626faf87f7707e57db4bb23d7c11a2da89571e52b049d5196d9669cf0486dbcb2e9c33c15b06b5531f23eef5d79fe4aa237ad2beb72ee25cd20
SSDEEP 192:gM1d66Joz0dzgCl6mc0dqOv5zboHLZoRyjmc:Dd66JozQzgC1jvborZoRyj
TLSH
T110E1FBA8E628867BC414037BDCB61B414F35389B984E3F2935EC65082D4B6DE368E1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 90355d3271f5e18863404cb8dbbedf6eae76add0d6f6876fbfa2c992f4b13072
MD5 260f2ab527b47e85552a995e5d9f2241
SHA1 ae5590476618c4ca9d506a9442ff178b83f2da6a
SHA512 3e9cc4d874b13f2b3cf2ef16d675dfc5280352364232d843ff6dce98e35cad1e906d86d26f3052190eab3b8dd525ac481d51abce98065913d5189727fb993e9a
SSDEEP 192:IOv5zboHfoRyjmc+M1d66Joz0dzgCl6mc0dz:zbo/oRyjBd66JozQzgC1jd
TLSH
T154E1FCA8E628867BC414037BDCB61B414F35389B984E3F2935EC65082D4B6DE768E17D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 66dc6ddca0ff1b9dcbcbb4ffeeb8208dc07ac4fe8063d15a893ef107ebe7d992
MD5 fd3ca60ccf10ccde582aca67617236ed
SHA1 8dd1fd82678a30a5d8176e2cdc4091b016604401
SHA512 9068f41e3448f7a5926bfb59ad305efef639c757fec386527ec08cef4204272af5cd5e23b934cf2f323595b5e651379220385bc3761b28f2d60e14c006478785
SSDEEP 192:VOv5zboeZoRyjqcHM1d66Joz0dzgCl6mc0d:KboeZoRyjmd66JozQzgC1j
TLSH
T1C2E1FD68EA28867BC414137BCCB61B414F39389B9C4E3F1935EC65082D5B6CE369D1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\datareporting\glean\events\events
Size 1KB
SHA256 4a4b7b22e69ae49b9f7734a7b4cd56cadae07a206d63fae89a60c2baa86b1472
MD5 f580456c4db69f5330fed8d64bc1f754
SHA1 ef76b2ef66847ea979a985390d7cab2bc0f1882d
SHA512 37a9df9de0a8107a87ef064943c74a6c53f507bcd0a55c63b7744f5c9bc1e8db8ac71ded9398d9f1fb6380e8b27add790f7757140cfd24396f8bb0828ceb33b2
TLSH
T147216A5E3BBD9D2B588BFA9CB44105CF63558A0B54471C431D02DE8CCD85AD932EE838
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\datareporting\glean\events\events
Size 2KB
SHA256 620b2003f0108293e6e91f9a187ccd5a03d2bdcf391fd871cf35fd49c323c148
MD5 3bcd21ee18c8623b7b630589b881633b
SHA1 e19e4c3a85e295c2feffc1c594aaadcea35828f2
SHA512 9e2f12fdfe631150924c6fcdc41df6aaabf9eec082fdeb9a0d21111458d42d395d9309ca8dcd991a56e90fd1943e9511369eaf3234b865525725e3da3c70915e
TLSH
T183418C0E67BA5C3A6897F6DCF80109CE67454B0694832D875D83EE4CCC52A9932AF43D
MD5 SHA1 SHA512 TLSH

Submit Download

28597892-d735-4ae8-b4fd-9960187502b7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\datareporting\glean\pending_pings\28597892-d735-4ae8-b4fd-9960187502b7
Size 2KB
SHA256 8d51c26dd87584bb9fac3fa5ae83dedf24d3a5cf61bcdeae6c2b62d29fcc5327
MD5 dbece6896e7c92e0fca2371a7db28f7a
SHA1 bc250ef7fd43103ffc8756231adc1c840e651328
SHA512 8c0b5868e3cc888f2c5e4b9b7fc894f5b6067aa7783aae76eaaae6d8f57f2a9f2bfba1b8eeb979df71c680cc5424947ee3fac9e76665a6057840092b52862f28
TLSH
T11841335C39B45C769CDAE14E8492334E57B18E6300C22D836D91EF0CCD96B9E63BA52A
MD5 SHA1 SHA512 TLSH

Submit Download

38953e63-4969-419c-a7b5-9b541c4c368d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\datareporting\glean\pending_pings\38953e63-4969-419c-a7b5-9b541c4c368d
Size 883B
SHA256 7ccb90bb5252d0ba89fa042d5dd87e177fee24b328d85551d431296333f79155
MD5 fc72a52c44de4c37782e99846cb59f51
SHA1 95fdfbf40966747af11196bf4bbf27b0ef9ac3b8
SHA512 df0d94b3b64848e1edf21ec18d99db9a62720a11c27ad48167cf6e545cd12e4cb0f3be38726f216ae0709182428fefb554078622266f58fbbbb7063460e37cc5
TLSH
T11D119C85A66174B28C78825B85A5370297F4763380CA99103DF55A144D7E91E93A670A
MD5 SHA1 SHA512 TLSH

Submit Download

9c5c547d-66b2-4180-8875-707614fb4237

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\datareporting\glean\pending_pings\9c5c547d-66b2-4180-8875-707614fb4237
Size 235B
SHA256 9401c718dde61098b0f0473f4d688fe5c6b56cc28ad5b404fc4123601d4b3639
MD5 e8b0d3bcb9b4b211c206a55282b0d513
SHA1 5edafc52248ef8f4334a890aacef86945b7bd81c
SHA512 89a84dae31e529a52bca14490ea6d950ab2703b2b70bd089f308a24ee2010fd255f69ce2a36e8b85e69cd11cd93d36ddaff4e70490daba27edac6ceb20aaecf4
TLSH
T12AD097C01498A71C08040F22F8A07ECA72848C331074A854C6608835AABDEC402A2C1B
MD5 SHA1 SHA512 TLSH

Submit Download

dfb96d7b-5ab2-4473-86a2-a7c87d69e9a8

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\datareporting\glean\pending_pings\dfb96d7b-5ab2-4473-86a2-a7c87d69e9a8
Size 16KB
SHA256 4c98403543679cfc0d8d8362de5ee5254e4073279b6dba5766735a1f7ea8d269
MD5 76bc17cd6862ae31599c801d6d0a7ca3
SHA1 f21da0c2d7ac4bb4a8140211ea9dc1876dcdd69f
SHA512 33891437a16b7f2ba3133da3f30e5c7cd667517e6bf9612932389812e5f9f6f80413379d9cdeb2c77b81225b38181979da0eaa57f9989742328c92986c803674
SSDEEP 192:+by2BZ1LKPa4lGbLSMi9uSzizsgrDjcXk+M15y2L2mPs/Q72YYu3W6AXeKjsmKkE:B28DlGbLSMioSWz3Djc21eMkE
TLSH
T13472CA56186055BA8261E368D4F8BFC3E2F538CF4C419FCA9BE4BD046DDA06E512788B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ef6fc191-8e94-4b77-9dfd-a301786c2c83

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\datareporting\glean\pending_pings\ef6fc191-8e94-4b77-9dfd-a301786c2c83
Size 235B
SHA256 6cd7d033a2ee34fd747444a8a00b0f7471043183d7051dbf6880c6552d7ef280
MD5 67f106e22952c03b7b188efc4b0b4ee0
SHA1 218b0a18ca19afac78071c0005a16f9888dd008b
SHA512 99e36fb1192f729dfbc912c06129bf7c1cbeff61db564c8859b556de571eaa310e52946ac86d1f9fa10b273c69ab195740d9a7e5326c5f12624ef05654866e4f
TLSH
T19BD09782188C23AD08080F02B0E078C230864C3B1874A810DAA180398AFDDC95211C17
MD5 SHA1 SHA512 TLSH

Submit Download

ef79e9bd-a326-47f9-9856-fafc2af0d093

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\datareporting\glean\pending_pings\ef79e9bd-a326-47f9-9856-fafc2af0d093
Size 886B
SHA256 362e8006950dae0de63e97ec6a2fad4465a07db3825fb95f24d3f2b4d9343628
MD5 81fd76441fc0be70ee5617c0a1068d7d
SHA1 d847343498e249d65c524170459cc2de0c08693d
SHA512 f110a8a3f996e3182911453dcbc307b6f885f18dba0a84016fc31a7e7c65ebd1dba4d9086b1e6c724396201f3974e55ab4ef1a1709b55c3e1fd13eae68bfe5eb
TLSH
T13F11D9948655B8B28C38938B88F5B74286F4712380CA5D047DE45B084EAE90EA3A620A
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\extension-preferences.json
Size 942B
SHA256 cf91c5fcebee0d71d0d20ec46579b48dac36dac9f7282050c722a145290a6686
MD5 049e3f74f928fcd7fdc29233b7326c88
SHA1 a99947bcaf045b7bdea588d5c76c3407f1ebfcea
SHA512 362cce92211768838d31b556e22e7810357b52caebefacee6ba05228fcc4dccd813bc40a19bded3ac3a8bf886bb7310ea7fd46cce5f599de9891df53813558b6
TLSH
T14311F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\extensions.json
Size 14KB
SHA256 1757899fdfbeb153a0897668e6e0a8533571e973974c3ea4b22dbb71803ff0f7
MD5 b0218d79d51bc58d163908fb4c5a610f
SHA1 44853c85dfbe7b68bf6cae1a28c66b807868d966
SHA512 c86a216a6d32d01ac368c3c518bfecdd684dc6e74946b4b9576ef7537170d739184b59dfd4eec742280e7ae49f8cc52ea812a62865033743849d36b5f31a5fb0
SSDEEP 384:vkI4vaUmldvP8dhWR94zr96onL4H0L4PDXL4H9L4HlL4HC:cI4SRfcXs4t6E4O4H494l4i
TLSH
T16062311544049EB8298FA79BAA367E02C37D473B60445C78F4DD8FC842FA5B902BB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\prefs-1.js
Size 7KB
SHA256 8f6bc47f5688888c8f2d42b5b8483a5c2536b6b9e5498f88da82c1abfb8d814a
MD5 c2ffaf2ecff171a96db8fa5a70dbb32c
SHA1 e4acbc525fd66dea076caede4264e32388d21f99
SHA512 29ccbf5b062100876220ae3cf650fb6fa0b27a10c083db5fce36a2904b0cfed9ee3f2ef2a94c89d0e7f504a8f13042b43d39d3838cb93c1b6efd03df4a81af90
SSDEEP 96:xHBlTUw3qGqYflnPObzS1SSlldv9jzynHWRMsVBw880o8L4cnpVPIu:TARYflnPbSSjRJVBw88K3
TLSH
T1ADF12D399144CF6F64B237ACAC244C715AA2023BBBBF68C654B994C4051CF3845FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\prefs.js
Size 6KB
SHA256 dda08ae9c7a7ac43d5c6a8d5b1150a2b5945b8072139c1584086d710dd1182fa
MD5 c5dca4f45f0621f181c628359bbcdd13
SHA1 64b394b7f8349ddff45f0ba1b8d01b7d4c614517
SHA512 f4696dea554a2987e125f524ee0a88cd4c62b35ecb51f10c10377eda96e44f327972836b877ee62fd62bbdb28293d8594f179287ddb09bf9bc569876a6310808
SSDEEP 96:xHBUTUw3qGqYfWEr1zSDASSlldv9jFnHHwgBw88H8L4cnpVPIu:T5RYfWEr2ASSZwgBw88o3
TLSH
T1E3E1217894088F7F74B677AC6C6888315AB2013BB7BF68D750B95885051CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\prefs.js
Size 6KB
SHA256 9183e86d72f349b37932f43e6ce98a7edb0ea6d7addcac9913291f15e9f910c8
MD5 bd62d3590769ff02eebf78f90f8daba6
SHA1 a2c9ad9369a18782cc7e29e9d941ece1f3ae53b1
SHA512 35c1b397c9b9c6cabf917016186d2e4f5380ed4ce505e7b341562b6b73b8d16a63251abf5fc00b123a60fac24727dc12110062c1306bd538bc506d67ced2720c
SSDEEP 96:xHBUTUw3qGqYfWnPObzS1SSlldv9jzynHHwgBw88H8L4cnpVPIu:T5RYfWnPbSSGwgBw88o3
TLSH
T1C7E1107895088B7F64B6766C6C6888316AB2013BBBBF68D750B954C4011CF3846F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\prefs.js
Size 6KB
SHA256 efbf87eb7d8eebd48f6254319866a9a8fa39b110abddfcbbf074955c2658b130
MD5 a44eb82d867463cd7f11f48ea496f4c3
SHA1 32a3f97fd4cc5dd103acfe205224bcc51a8a228d
SHA512 1bc5b8813a06369a565ff58fd36a7403fad9fe91c28ca992e606ee398c885ecb0440bee026c02ff78ebdfeea8fa1bb0f09e477521168bda871b06d01c29b3ac2
SSDEEP 96:xHBUTUw3qGqYfWnP1zS1SSlldv9jzynHHwgBw88H8L4cnpVPIu:T5RYfWnPWSSGwgBw88o3
TLSH
T1F4E1207891088B7F64B676AC6C688C316AB2013BB7BF28D750B95485011CF3846F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\sessionstore-backups\recovery.jsonlz4
Size 214KB
SHA256 632a42c3e475169018f771f981de5424bfcbdedb778f98be10a7929b22678e20
MD5 62e880668dddc19f80cb2f09dca07739
SHA1 fa559fd2fc40a6035efe120854b44fde3eecd1a7
SHA512 ef60387aca89d36db73f0bb9327ac454b01278351477e63e4dbe23fe9c0b8b18c58a6f113c56a282820197c0ab3d23dc008401f1d6559b526607cc3f849f1c1d
SSDEEP 6144:0JBNy3pDP+0Jj8PdeMHsbt6w7nouzYF7SvjD48o1C6dTo:0TE5D20JQPdeMst6WYF7SvjMF1po
TLSH
T1052412BA7C1673A45B5495BAD83718650F4F6FEF80ECCC9E4340729219B6990CB2F90D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\sessionstore-backups\recovery.jsonlz4
Size 214KB
SHA256 d6bc6388f2bcdfaad58617b79d2aca2bd121e270a402324ef6391dd002c19fc4
MD5 4b0c6856eaccb0815be12f21cc1818d5
SHA1 c4ac4b779b3ebd36ff1d7a4c38722dca4383b240
SHA512 a96e2d1d85f0d6b41d46f5b431307c980c14d47bae494c4ac7192dd205b2eff35bd695e9ae296e4886355e6601a3add4f037d92aed9f4ad3418fe5cf045b0f1e
SSDEEP 6144:DJBNy3pDP+0Jj8PdeMHsbt6w7nouzYF7SvjD48o1C6dTn:DTE5D20JQPdeMst6WYF7SvjMF1pn
TLSH
T1562412BA7C1673A45B5495BAD83728650F4F6FEF80DCCC9E4340729219B6990CB2B90D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3046956142obaDid.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wi9zt29h.default-release\storage\default\https+++studysync.co.uk\idb\3046956142obaDid.sqlite
Size 48KB
SHA256 e487e89aae4243c5f7b4f5f1de092b387d71d5cee67474dbccfb8867be1e8b8d
MD5 4e2038b0f9a7bcb7d45ae60f6572a28c
SHA1 fe87a74a82cc0fd83932ee5a334b4dfc663d670c
SHA512 d0494890dd09f118d05b71348d06734332c16640990fc9ef2340cb713fe2aa8751f3d1b8394b2637b6aad558a2d5bf72cbb29a1dac780cb6080802f2eb105432
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEY:Oa16S6CKnqlizbxV+2xVeU7X2B0Y
TLSH
T185236E8E3F07A511C53AF0B178A08D51BC5E321E07222AD569D0DAE4C8F215AEE5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download