hxxp://yougame[.]biz

Analysis

user interaction
yes
max time kernel
68s
max time network
71s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/10/2026, 14:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://yougame.biz
Sample261003-rf4vhszfle

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 26 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	4288	firefox.exe
Token: SeDebugPrivilege	4288	firefox.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe

Suspicious use of SetWindowsHookEx 16 IoCs

pid	Process
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe
4288	firefox.exe

Suspicious use of WriteProcessMemory 52 IoCs

description	pid	Process	procid_target
PID 1580 wrote to memory of 4288	1580	firefox.exe	82
PID 1580 wrote to memory of 4288	1580	firefox.exe	82
PID 4288 wrote to memory of 876	4288	firefox.exe	83
PID 4288 wrote to memory of 876	4288	firefox.exe	83
PID 4288 wrote to memory of 876	4288	firefox.exe	83
PID 4288 wrote to memory of 4496	4288	firefox.exe	84
PID 4288 wrote to memory of 4496	4288	firefox.exe	84
PID 4288 wrote to memory of 4496	4288	firefox.exe	84
PID 4288 wrote to memory of 4496	4288	firefox.exe	84
PID 4288 wrote to memory of 2152	4288	firefox.exe	86
PID 4288 wrote to memory of 2152	4288	firefox.exe	86
PID 4288 wrote to memory of 2152	4288	firefox.exe	86
PID 4288 wrote to memory of 2152	4288	firefox.exe	86
PID 4288 wrote to memory of 1068	4288	firefox.exe	87
PID 4288 wrote to memory of 1068	4288	firefox.exe	87
PID 4288 wrote to memory of 1068	4288	firefox.exe	87
PID 4288 wrote to memory of 4412	4288	firefox.exe	88
PID 4288 wrote to memory of 4412	4288	firefox.exe	88
PID 4288 wrote to memory of 4412	4288	firefox.exe	88
PID 4288 wrote to memory of 4412	4288	firefox.exe	88
PID 4288 wrote to memory of 5312	4288	firefox.exe	89
PID 4288 wrote to memory of 5312	4288	firefox.exe	89
PID 4288 wrote to memory of 5312	4288	firefox.exe	89
PID 4288 wrote to memory of 5312	4288	firefox.exe	89
PID 4288 wrote to memory of 5596	4288	firefox.exe	90
PID 4288 wrote to memory of 5596	4288	firefox.exe	90
PID 4288 wrote to memory of 5596	4288	firefox.exe	90
PID 4288 wrote to memory of 5596	4288	firefox.exe	90
PID 4288 wrote to memory of 5772	4288	firefox.exe	91
PID 4288 wrote to memory of 5772	4288	firefox.exe	91
PID 4288 wrote to memory of 5772	4288	firefox.exe	91
PID 4288 wrote to memory of 5772	4288	firefox.exe	91
PID 4288 wrote to memory of 5780	4288	firefox.exe	92
PID 4288 wrote to memory of 5780	4288	firefox.exe	92
PID 4288 wrote to memory of 5780	4288	firefox.exe	92
PID 4288 wrote to memory of 5780	4288	firefox.exe	92
PID 4288 wrote to memory of 5788	4288	firefox.exe	93
PID 4288 wrote to memory of 5788	4288	firefox.exe	93
PID 4288 wrote to memory of 5788	4288	firefox.exe	93
PID 4288 wrote to memory of 5788	4288	firefox.exe	93
PID 4288 wrote to memory of 3896	4288	firefox.exe	94
PID 4288 wrote to memory of 3896	4288	firefox.exe	94
PID 4288 wrote to memory of 3896	4288	firefox.exe	94
PID 4288 wrote to memory of 3896	4288	firefox.exe	94
PID 4288 wrote to memory of 4744	4288	firefox.exe	95
PID 4288 wrote to memory of 4744	4288	firefox.exe	95
PID 4288 wrote to memory of 4744	4288	firefox.exe	95
PID 4288 wrote to memory of 4744	4288	firefox.exe	95
PID 4288 wrote to memory of 3240	4288	firefox.exe	96
PID 4288 wrote to memory of 3240	4288	firefox.exe	96
PID 4288 wrote to memory of 3240	4288	firefox.exe	96
PID 4288 wrote to memory of 3240	4288	firefox.exe	96

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "http://yougame.biz"
1⤵
- Suspicious use of WriteProcessMemory
PID:1580
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url http://yougame.biz
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4288
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1956 -prefsLen 27097 -prefMapHandle 1960 -prefMapSize 270279 -ipcHandle 2044 -initialChannelId {617c489d-7af0-43d3-830f-43e9cccbdcd5} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:876
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2428 -prefsLen 27133 -prefMapHandle 2432 -prefMapSize 270279 -ipcHandle 2440 -initialChannelId {3a73cec3-f72b-4bf4-9e58-7a247e29e841} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:4496
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3836 -prefsLen 25213 -prefMapHandle 3840 -prefMapSize 270279 -jsInitHandle 3844 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3852 -initialChannelId {6c6baff1-6fb0-4be7-9f7d-3313bfb93fbc} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2152
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4048 -prefsLen 27323 -prefMapHandle 4052 -prefMapSize 270279 -ipcHandle 4124 -initialChannelId {d6b3c757-f04d-4dc2-ba13-223bbea2c70a} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:1068
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3856 -prefsLen 34822 -prefMapHandle 3892 -prefMapSize 270279 -jsInitHandle 3836 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4476 -initialChannelId {7fe2a12f-f7ee-4390-abe9-3f45846f05e5} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4412
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 2812 -prefsLen 35010 -prefMapHandle 4644 -prefMapSize 270279 -ipcHandle 2820 -initialChannelId {3bb2e237-7608-46db-9651-7816e8330d25} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5312
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4744 -prefsLen 32952 -prefMapHandle 4004 -prefMapSize 270279 -jsInitHandle 5184 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3360 -initialChannelId {fc2058d6-2615-4439-81c2-2b631f143eb0} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5596
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3924 -prefsLen 32952 -prefMapHandle 3908 -prefMapSize 270279 -jsInitHandle 3912 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3900 -initialChannelId {9b6c4baa-54f5-420d-afdf-12176f9b476c} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5772
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5684 -prefsLen 32952 -prefMapHandle 5688 -prefMapSize 270279 -jsInitHandle 5692 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5700 -initialChannelId {578b8e60-e223-4626-a0f0-300234c1fe49} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5780
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5876 -prefsLen 32952 -prefMapHandle 5880 -prefMapSize 270279 -jsInitHandle 5884 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5888 -initialChannelId {400582fb-93ee-44ef-a664-9834e57d2b89} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5788
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6380 -prefsLen 32994 -prefMapHandle 6384 -prefMapSize 270279 -jsInitHandle 6388 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6396 -initialChannelId {f49e690f-598b-4421-85b7-eda3f2e6e18f} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:3896
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6624 -prefsLen 33056 -prefMapHandle 6640 -prefMapSize 270279 -jsInitHandle 6644 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3028 -initialChannelId {a3d37927-d799-4522-b8ac-3dbec675bd09} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:4744
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6928 -prefsLen 36600 -prefMapHandle 6920 -prefMapSize 270279 -jsInitHandle 6912 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6944 -initialChannelId {f133a551-aba5-45be-9d99-3064ceca9116} -parentPid 4288 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4288" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:3240

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\activity-stream.contile.json
Size 4KB
SHA256 e154afffb49ca1e311c7dc792df741b6be6cc92ab663a41047eb718feb17fb8d
MD5 de01354de73784782f34988b5857181b
SHA1 ebb14573392cf0b707e6f608c725f94b15b9edd8
SHA512 0fe1698b02d148a303c3a084d823c8fdb852ad26a319c61ec3210b9989ee4ed386e309c3302698f34b511eba6b6883d70b81609ed58ae20bf71f3b710a6c5f66
SSDEEP 96:s3o7jepLpm4KYib3o06DHZonTcLVyFuplz:He1pIY0wHZoqyiF
TLSH
T13A91F87BA63888065B727AF43D0F169CF01730169EE4DDECA1155C36E3697A840EA5C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 3de17c2f7e6d0b1265340e753446076f30ad03144bdaea8852edc7bb3a8f9bce
MD5 c6b489b8d9fb0c55cf242dae5205e03b
SHA1 d1b71c277c99a4e5fcd7c89834731e62120eac31
SHA512 4e6149ad6cc77e3badbd72a3fc4b081acbb8451216b128e4ff54345b155b3afeb56cd48052263eba50404ff3e781114e1418718188dfe8730f6e512e7db54d41
SSDEEP 768:3y0TeM9LpG9mud3aO9T4Zkif51vGN2J7cOOr6UNObeUSLsx:i06CeP3aON46ClGN2J8NObe/u
TLSH
T15A7308A3A7ECB1FB1B9037CB2C0F795B66A50146E74906C9FCE9C91C80CD654027E6B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20131

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\cache2\doomed\20131
Size 418B
SHA256 96dd4221e2f4d81d79cd409b0a5cff7c0f14480a15c33b9a72dff8b9928a9f02
MD5 2315f7c727768b740cd56c1e8f1ff679
SHA1 fbf5f2bd7eb7ef2d5c9488aed03278c8a15f666e
SHA512 4c59ad1abafae92bcd741d69527901985dfb0c99abf7db3baa0082e5a3776bdf80d1c556ec5a0e1d86fc989f6b1e057ed4cda01612c0355a9f340d8450f7717c
TLSH
T11CE0ABA36A06D411A8EE9BB6F480BF0B550309036E814E02D0019028286B0F61C8CB1C
MD5 SHA1 SHA512 TLSH

Submit Download

78C415BE486D106065FFF4B64E9806B0BD908D76

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\cache2\entries\78C415BE486D106065FFF4B64E9806B0BD908D76
Size 23KB
SHA256 8817439306b15e062316aec0a328e052cbc3a490761074408d4a51c474de1503
MD5 75ab789d08f45f24b502dc8ffe299818
SHA1 86ad4433bec023deaec19e0414898ca82216d3a5
SHA512 d074e55c12a40d81ea67c6908fa000843f997c4929233fc2b3c1e4feb260cb7f536436b41287f9d485640651f457c9133fa4e36e9f5d268b107c5a7b99c699f7
SSDEEP 384:9+Xku+9zlwIr37bHE2hQxRKKoV21EbxtzAR26Xf0YjkG/bB7SOEAd9KVRaAcP+A5:Bu0xVr37bbexA7xwP0Yj7zB7S/AmVAf/
TLSH
T1E0B2BFB4AE052876954614E2C8BEC5473C28F693EFE084DC2D817B09564D35FFDB158B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\cache2\entries\AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0
Size 16KB
SHA256 3c450ff54fab766dc8a3931b77e5ba767dd5d3e54705b9fbf4b6117ed4b60aa7
MD5 b6e576d1b17d3ad4059cc06a52abab90
SHA1 08284b2196f0cf72ab538ffc30f1a73a0103af10
SHA512 4bdfb403854fcf3323a73bdd7f8d34e189f2f23254b192657b824bf9856c499d49064884b8b4e100696dbf3bcf7c6682ef8b329d601b6f7c6cd9cba30245efac
SSDEEP 384:HalwSiO024YUWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAN8L+4k8S+49:6l8ZYUWTToXJWTTogB7S/AmVAf+hRMju
TLSH
T1DB728E7D8F013CAC2A5790E8C8B943558D1CB6A7DFF5C02D21983E09CA94A6A71F985E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E8E419671014CECDCF2915C0D1D0337AB188F914

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\cache2\entries\E8E419671014CECDCF2915C0D1D0337AB188F914
Size 62KB
SHA256 ed4656443fdf464eb76803b1e958c688976f3d9548c712ed1f51b52f7fa5f8db
MD5 1304debba0a0172e745691fc6e27be25
SHA1 aad40c2e0912e2dd3278b48fdcfd27ecae9e10ad
SHA512 bd7b9099a7be6208c3c8170214500ebf5b5260452922c131649e29484d7492c6a1f4f9dac87496e4acd36346bb2289783e53c5c70c65df0495a859d4ab2118c5
SSDEEP 1536:ErakvSoe8cCNbrFUktvo0yoSy8gGuEhwhAA8N3OMFdjyH21Cm21oi:ErVvgCNNUktLL8g79uNeMPy4Cm21oi
TLSH
T18F53F1B749612060CEC6115FED8AC4C84C04F927BC667BAD3D953798F439B4A9A2FAC0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 c2cde4a66c60daa71f5b324917f28ee7c804b3dcf2b184b287c85a2265021aae
MD5 0c0d52d3c0ee599ffaecbdaf19964267
SHA1 8b37e2d4c5f87c143b575b31e00e7b7b2690e39e
SHA512 d7b4594230eba5a901c50780b0a7c6f34e3074eeda9b4658a9a85770f9a84def5e8b7a33ea7d9d9747d85b5576f85d3e3eb0d258c4ab025642efbc80eb8516b9
SSDEEP 1536:jTrliBXwDDSdO+zErZ0cuV1R4J1KbU70UErRZ2WAcB8L6vySeJIdAXF145Ufsilv:j3lgO+zVfn4byUwIP7lK5UqRg
TLSH
T1D3B3AEF6DBA2CD3D55FFD42D6AC2853EFD262410B3A73009D813272461CABB86679748
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 60b219dde918d5d856543eb505f674c9ee338462c13d2b9e5826c89220685541
MD5 a6528cdd0508d69e18db04726c832edb
SHA1 8ed0f1e3bf435c3721a493ff2c1142bec606eea2
SHA512 97e0e6bb230a876f5f73f5c52791ae18b04970c2e6d0037e1b10e140ddec2a914528c2463c087478a27cc1ad66899896dcfde83b670698da467910dbe44c1be5
SSDEEP 1536:XTrliBXwDDSdO+zzn9it3ZJrAqa1KcB70SExXicWAcB8L6vySeJIdAXF145UfsiN:X3lgO+zjoptN0fBwXP7lK5UqRq
TLSH
T1F5B3AEF7DBA2C93D55FFD42D6AC2853EFD262410B3A73009D813272461CBBB86679648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\AlternateServices.bin
Size 10KB
SHA256 1babcb333f1c819eb5ecf161637c27ca247c91b3e496aacff55b2d2006a6535c
MD5 7dff54e4bc31b25734e3a1b0af83e09c
SHA1 6cfeef1e023f4cb151e1744bb2211b9b824aa7b9
SHA512 b74907eedc1fc1132af27c63aea063dead7468092e4448a182b0cf4adbe109b17675027e38cbe577050a7f98b505a223a0ac9c2489aaa11a33ea14347118f559
SSDEEP 24:czuhMZNaqbvoOLfqLez18LWTGqLGGjGKl+lzikfFsiDNmXWo:0fZzhGFGjGi4bjgW
TLSH
T1D4222FF773766161F0614FF460683D498C27030A75E8D5848A15E0A795B23F6F1EFB49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteSecurityServiceState.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\SiteSecurityServiceState.bin
Size 1KB
SHA256 3ab7600d168303c76ec3b44c70f25ab43355dec5aafde8d15b69c7b3b99f7643
MD5 971411b4b7ad161e24e4e28fa328e631
SHA1 7a9852d5262de580b39418707fdc8ad4300f5643
SHA512 642ed2e5f38d9e78d0a149db3c3e6abfa5da871212793b7fd2f15792685699f60b11557ce37228b79f6c4b18c509ed57efa44f8f02beada777d7fca6caa59ec0
TLSH
T1242112798CDAC071E0C246377ABE59142DB6B34782E2F4A4BF9196D530C4EAC61AD290
MD5 SHA1 SHA512 TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\addonStartup.json.lz4
Size 4KB
SHA256 669b7aa13f6a9e2b43f5aeaedc36cf7b83d37bf8da8b6a76fb99ab80ac35d85c
MD5 8b7c0dfcb614d1f8711c647f9fede820
SHA1 a198387d5774c8cd955187fa9c22270b4973f29f
SHA512 7dac7753b1c4554e7ca6d72161ace731fcecca0c65dda328d83dbcfdeb637963cbdcc4856c49ba81c603b884ea6d771ff1c47a217987b5fc16b96affa4fb8b2e
SSDEEP 96:Nbqn4sHNw6M2xWGhD41MgGvmHC+rUpO1LnOYvhQhIRhN:NbH52xxhD8rGvmjApwnHUuhN
TLSH
T1F2A17CBAD541EFA1FE32C04348E93FB2EAE9AB7424A9C4D4F1AE71294C24A735704340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 b594f9fa18b2702a509ec8175f133cc9882f4240f1b0dc7d4502a09e1538ac15
MD5 fc6212959d1170dafaf4de49149b52fd
SHA1 05b4373f773d19fb9bc2cf384eee7839329b059d
SHA512 fea863092849734d13b0703b78454bfa3dcf0c80f2150ba962059080df412e6685e1adec8284e5513075f3af2aa88678a15570ace4926ee9522f27f67f2a4109
SSDEEP 96:TNv8SdF95/7bkW6QXjrvEIQSyUR6x1WZNF22UbibNbx/dd66Joz0dzgClKtmc0dz:xv8Ov5zbooMIQSyjxcWWpx1d66Joz0dH
TLSH
T1E1C1EB28F7294A3BC449423BCCA60B810F36399B984E7F2935DC645D2C572DE768D27E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 20213c9d2c3bce37384f5d9f19d42b2984db783623ba3eb22edfb09a9de285f6
MD5 f4fd86bc9ea51ea356289bce7167bf10
SHA1 1ce18347099abb8cda8323d864f16938d81c82a3
SHA512 928e5f76828667affff84c217ad3ca77ecefa7961dba3fe49c2ca33151494e698acf0bd26170d09302170e842ff4aa8b9f4b6a37bce68cfc1a1ed759f63857aa
SSDEEP 192:yv8Ov5zboHIZIQSyjxeQAWpx1d66Joz0dzgCl6mc0dz:yv/booZIQSyjx4Wpvd66JozQzgC1jd
TLSH
T15DE13264E629863FC408137BCCA60B850F39399A9C4F3F29359D605C2D472DE768E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\datareporting\glean\db\data.safe.tmp
Size 33KB
SHA256 078a65b0a1bb5697600f800301d68c711172f0f6b1ec7344cd34f9b5059a1c5b
MD5 7083a1ab9d3b165fcadc7d05a8b760ba
SHA1 2687768508e35735c98f10c5f8a84724c12c2cd2
SHA512 953193313f1d29dc74deac19037638ef1689ddec8963432deea30209238680cc0a403956941c5fbbcd21b1b06b720a1d63954404da01107558177dfafd6d0ece
SSDEEP 768:BeLDukdujxiGcmhu9WB10KW97DJUbbbQbaLESlc2WpIm/:BeLDukM110+oF
TLSH
T134F20084FB2E953FC41512BADCA51B042F79F885581A2F5B3A4C64682C872DC3E9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\datareporting\glean\events\events
Size 1KB
SHA256 ec276ed1f525570982b747a2239c00ae33fe4cc407698f2e6427b46b4ae915f2
MD5 65d46ff9b57c81b5a47fcacc3d077bc3
SHA1 1bb258390579065ff1684eed9508872dc2c54e78
SHA512 9dee85e2043822c0e1aeee72d345b784efc9b6c742c917f99029d61795fa2bd00b5a7c6c380f89d05542287c85627a0b619c22d3e2011d999203ef6178160188
TLSH
T16521A94C39F84D6BA88FEA9C7585028F53554E0B158B1C470D16FE8DCCD1AEA32BA438
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\datareporting\glean\events\events
Size 3KB
SHA256 c5b3f65b593630a13033922c1d69846fb99abdf0ab7e62b495bd15ed8aa15293
MD5 2ee56cda1729f12358903b8ed7cf834d
SHA1 19a514014a8e1ed720dc385e3bab0fa8d543f1c4
SHA512 097d2f4d3889168f7cdd068b900b35589fb2c4bbb8e6b1aa2cca9d7365236bc7508c83e4025e7904f637f8a1ad50bc6a3f1523d161fdf14f260130539939b3a6
TLSH
T16C81D48C31B94C7A698BE69DB9810A8E53598B0360D71C4B1E86EE4DCC81D5E33FF02D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\datareporting\glean\events\events
Size 4KB
SHA256 23297299be08bd5d567ff15c40efb76d612b68e66873b9ed64876b7e220ffeb1
MD5 57a91afc419d4e15ac738d4356720864
SHA1 87b90ff06d04203efb19edf463767a80955272b7
SHA512 38a671b67ff0203c42628419bff2e0013f577a47564e9de7f0272c100f978354076f9f36df36eec90761114f64821dc60c5e9ebf7024330e59f9e66d3145cda1
SSDEEP 48:YpElzORNSRncKB/jW0bW1MTW83JWwO9W5WKareWrSrdWeDrfWPvtW+c1r5zxXHz/:pg0yh8IwbIK63P3lcfNXH7HczdrBQ
TLSH
T11AA1F88C35B94C7A698BD59D79810A8F53598B0360D71C4B1E8AEE4DCCC595E33FF029
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12cf1f39-1380-41ef-8788-d89bb06c962d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\datareporting\glean\pending_pings\12cf1f39-1380-41ef-8788-d89bb06c962d
Size 886B
SHA256 65440c05a721d10c706cd5196e721ae81a11cf89e29019acff0872355ab16735
MD5 8d5f10f0f1603a1fa4f7491dcf6eea4d
SHA1 0691eaacad8a948147e7d1f5dfacf17bb733f0ea
SHA512 aa2dad72fdb059f79329cc017d5bd2081c722bb697c103a08e3ca446f3952dffdd221a32a6c03d6b3bba7fe9bcefaa479665d69d37ba8e114e2af39534dd8ae3
TLSH
T19B11008193297DB29C78938784A6B74347E47163C0CB491C7D655A280CBBA6EA36230B
MD5 SHA1 SHA512 TLSH

Submit Download

6f9f1440-8c6d-4ab8-b76b-2fb9ac5b7f75

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\datareporting\glean\pending_pings\6f9f1440-8c6d-4ab8-b76b-2fb9ac5b7f75
Size 235B
SHA256 2bc9f11028e5316befcf07fb007e585343ed042400053916fea6d0e1201ff31f
MD5 fb7c3fe30571ad570f177f559858b7ff
SHA1 9b7c58c6e5c19d9988671141ecc2e0b1fa660b9e
SHA512 6b170a3ce106c4f48f6ece7ab537949fad1c12471e11e321b52705876cb74e11db892a0a8cb1fbdd845f6f6089f9bb34a357931279ee1430ac7d65ee9216a81e
TLSH
T1A5D0A7C5249C675E08285F47F4A06EC670654C3764B8AC24DA914575DAB9AC8426191A
MD5 SHA1 SHA512 TLSH

Submit Download

717058b3-f4fe-46e3-8109-e1360a0de9b2

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\datareporting\glean\pending_pings\717058b3-f4fe-46e3-8109-e1360a0de9b2
Size 16KB
SHA256 6ae7115f73091da36b143919dc86e485f186cd838364ce8169e2f79d41b1db06
MD5 a06139d487a0d5520d8d1608c409f07e
SHA1 5f36e8b7ead905ff0829ef8dd6adeff72ae898f6
SHA512 d0482f370b1a8732971309ac21f67bef85c8ee719a8971aa3c071b9f13c2d03905b525fd7d5905dea95fd29a0a21011128ac5428c1b10cafc34c9b62db497d4f
SSDEEP 384:QwtA24XuELFlR8b90/W7sNinTQXYVb8S+or:DtA288qDIVAS+or
TLSH
T18872D8566820457A8291E36998F8BFC3E2F538CF4C419FCE9BE47D086DDE06E502794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9029e9d-b2b1-47e3-be91-dd9eb0bcf508

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\datareporting\glean\pending_pings\a9029e9d-b2b1-47e3-be91-dd9eb0bcf508
Size 2KB
SHA256 9c4ffab0573f9edc41aff8e45aefbbdbc00521ccaa95df4eeb2a4567dc314910
MD5 1d889726e10d2dad087800c5f682f5e4
SHA1 861c196e2a3a9cf10cf47fbc24b93b6949dc077f
SHA512 e98f7b77d012fdbbde9e0b03ccf0a6b850697aa877d5152bb7745c583fce37d1a9f4c38c17f9c0bb2edf725a703d858663c0729f99c2bacc936131ce307e598c
TLSH
T11B41105C75BC4CB75CDAF58D8492238F53B08A0340862C876D52DE0C8DE669D33BE42B
MD5 SHA1 SHA512 TLSH

Submit Download

d9677eab-ae17-4080-b4a9-ef0aaa5e2abe

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\datareporting\glean\pending_pings\d9677eab-ae17-4080-b4a9-ef0aaa5e2abe
Size 883B
SHA256 63584aaef8215a4e7affc7542dfeaefcf741d0fdd6941254ab060b39e4397742
MD5 7ccd282fd7210d08df8fa0cdc6dda129
SHA1 7d299a147c8ecbfad2132164af2a06cc788b1fe0
SHA512 5dc1c1754abbb957a363b2a9bf9411cac2e755d2df7e187f63c3e5a40a24ff678044c6c7b6efc818a0c57d757da4bc530cf2caf19c00c0ff44c848581039ea30
TLSH
T1DB114441E3387D72CC6C824B8856774387F87513C0CE941C3DB159180C3951EA35670B
MD5 SHA1 SHA512 TLSH

Submit Download

f5050df9-36c2-48eb-b38a-22876a7b9ef1

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\datareporting\glean\pending_pings\f5050df9-36c2-48eb-b38a-22876a7b9ef1
Size 235B
SHA256 dc885ccaca1371a0b0e31c371d2cd841758cf458b043168fc69eeebe7b7375c6
MD5 19fa102304d084f9ad85726306099d91
SHA1 a9e584d90e9e48fddccaeeec6c0556e662650ede
SHA512 abc97f4192340fd1786edf886de28ae43596ed8909950d1fffc8ffa1cfcc5be7403221189eb836995754df14db1b56e82ce313c9476e66a96413a5e5e40cc55f
TLSH
T1CFD09794289863BD08044F02F8F069CA30C94C3324A4D860C5910036EABDDC8022181A
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\extensions.json
Size 14KB
SHA256 efeb8c57a0f7e1464915355d13ae673da9455258e36695647745f017ebf21193
MD5 d0b88ea1ce229e9832a8e160af574565
SHA1 5e0f03604b2833b38a921c6ea8ecdcbae68645dd
SHA512 71cb05ea1ab4942fb6bb3b03a6dfc80c8ad527f850f278d4814e4acb659c58c4f0d0817134b4daf2b7755e35b75cf081bcd3910a9fd573920619422a109f6e17
SSDEEP 384:IkI4viUmldvg8dhWb94zB96oCL4HWL4PhL4HHL4HJL4HC:fI46RfZXC4z6D484h4L4B4i
TLSH
T15362531545149EB8294FA78BAA367E01C37D473B60445C38F4DD8FC842FA5B902FB66B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\prefs-1.js
Size 7KB
SHA256 1f7595668619d2985a368748ee05c71ceddb810164274f0381d828ab996e2633
MD5 6b9bfefe67774d53dc1de57d762aa2fc
SHA1 743b6a3b4d5c30d41a581f6170bca1a7e65fe8fb
SHA512 0ab3a9a3e277e54618e1f3a7c4a1804605b47673f6879f67f8608bbd29d17c0a55a93e7475c50801db3d063ff2f6887c7265adec856b2c815dcd96a5134dd17e
SSDEEP 96:xHr8tTU5qGqnfZkfObzS3SUmSSlldv9jzhneHizcmDFCBw88bs8L4cnBuV5:GBRnfZkfdSUmSSqizWBw88y5
TLSH
T1B5F11E789144CF7F64B636ACAC2848316A72013BBBBF68D750B944D4450CF3852F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\prefs.js
Size 6KB
SHA256 93c65834d555c06091092bb7473c3469c2f898979aabd66588b50b9e0e6db70a
MD5 0983830ccdaa1b77c271aac905871729
SHA1 ac44912daab66b6bf312b658ad41b0caf4c68966
SHA512 1fe1fb45dc65a044c80e7e72cf5a07a742f7b79e265afc502f977a9d84f558b343403f2b0d53da5985df362b1a59fcfce147a1adbd94e33fe1d6529ab5ad0cbf
SSDEEP 96:xHr8UTU5qGqnfZIL1zS/SSlldv9jhneHizcmDFCBw88H8L4cnBuV5:G0RnfZIL2SSWizWBw8835
TLSH
T150E1207894488BBF74B637ACAC6888316AB2413B77BF68C750B954C4050CF3441F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\prefs.js
Size 6KB
SHA256 56487e5f8e641e6dc9a2aa05b4a03e7c65da30caf419a8e986806b2421d41707
MD5 fcd0d3e895ca41c10303c1d2b272762c
SHA1 4fd0c714be785d18c14096c41dd9c15c121087aa
SHA512 40e8a27c402463db75ec46aa13ac4ab799a622f7d8a9aa7fd5ccc5b5a18180306b6cf841173eb3687ab7e4de0c3bf6e4fcce16bbc419a04bc41ff4c745f8e1e4
SSDEEP 96:xHr8UTU5qGqnfZkf1zS3UmSSlldv9jzhneHizcmDFCBw88H8L4cnBuV5:G0RnfZkfWUmSSqizWBw8835
TLSH
T141E1207895088B7F74B677AC6C6888316AB2413BBBBF68D750B954C4050CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\prefs.js
Size 7KB
SHA256 1ea01adc7347e84eb5488967b91d2c9710d2807cea6dd01a53d3c71a6a5ec78e
MD5 1ce38c6299070d6a1438c132a5f9197b
SHA1 6ea9b05fce08ed57a145ca621d2b07fb794ef364
SHA512 bedd2b9112c60af30e834e2a5840e650060ff40c45e9939fc5dd9c4ccbe6b397e308544ab8ea8c8848f5a4dc859e4e2b3cef07af337d012f84fbe8372d04d814
SSDEEP 96:xHr8UTU5qGqnfZkfObzS3SUmSSlldv9jzhneHizcmDFCBw88H8L4cnBuV5:G0RnfZkfdSUmSSqizWBw8835
TLSH
T19EE11E7895088B7F74B6776CAC6888316AB2413BBBBF68D750B954C4050CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\prefs.js
Size 6KB
SHA256 42e723e2a5de6ecc3f6fe7170623311ed1d463415149f7fbb228f4863cc0cca2
MD5 b40965c0a4eea45e500bcb81a2d1f77a
SHA1 fd724854e8d7ca523505c59fc0b70597f70f0958
SHA512 2b302c1299babb0ce528eecb83cefcee0bd9a8adf1790792988ecc7bccb2a448ee2a6b507cb8f3d1d4842eb6a16cb9faa5518243457d8dd3478b3fbb0c51d491
SSDEEP 96:xHr8UTU5qGqnfZkf1zSMSSlldv9jhneHizcmDFCBw88H8L4cnBuV5:G0RnfZkfZSSWizWBw8835
TLSH
T1EFE1207895488B7F74B677AC6C6888316AB2413B7BBF68C750B954C4050CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

serviceworker-1.txt

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\serviceworker-1.txt
Size 168B
SHA256 70fc92d05b5d9f0f36752ce43800520e48a1cd9815052c99e5c2bbc716e7912a
MD5 fab4f2c42eb57df00b6e5f43bd25d2a7
SHA1 9b10921226edd4eaeef246137599e77480ba0431
SHA512 8e233836485c990088f94232f520b73a98fe03410489e2b6f4a1111edbd6c63fed389805b8a69830f2baddae3d5b75a9aacd97d685e04ad2e08330a37032390f
TLSH
T1A1C08077520D3032703919546150115F4761050477CD4F5E87FC5914D4F74F43D9C406
MD5 SHA1 SHA512 TLSH

Submit Download

serviceworker.txt

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\serviceworker.txt
Size 153B
SHA256 a50946bcf758c2aca59282bf2f7f016f0640dcdd906fafef513add696525caa3
MD5 99a035ddfdbf414bed551e67375a454f
SHA1 57d32c8dfdb3bf60f448751df3c2d779c21989ef
SHA512 52ee7cf33eff8cb4bd9e9ede26cae0263e3e59f18d81c09029170e138b3f4bb74962a16c38e1643b567eeb0befc841aab28e33d4e4d6cca2b4a3d96bdbb3f159
TLSH
T16EC08CBB9209303170291A54209021AB87A209083B8D8F6E86EC292494F68F5399C80A
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\sessionstore-backups\recovery.jsonlz4
Size 50KB
SHA256 c6d1b373785d2be7acf4fc2f0fb9e5126c3d42b5fe37301a36e0bcc9219a7750
MD5 269f4e2e6b23325c8189b8e880920c28
SHA1 c11174619da41b87d8c639403275eb15b23df9eb
SHA512 2d1b5879577d50139afdafe4d5561dfe614abe8f020c35eb726562c9cc762fd8a08fe9908ad7f58268a52d3cee009e19087b6001a36a075f6c0aa011c46d2667
SSDEEP 768:mpOnIS7Irkeyciz6irDbICrSICV8jgY46PTyGumyVuTQOFlO9yfzrrFS9rJoGYq4:G3gokeyciRcEVnovETBlOyPrYdoGYqgF
TLSH
T1C23301838DB72A104B0B4372B8C1E6E97F430DA61CB4D2D5C7263867927EF1205E311A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 5283767d415b8f44a7b0999e29b468666673ae299e5a19790f78eebbd1f0bd4c
MD5 ba241539c874c5107dc2d035fee8d18a
SHA1 00fd20efe8d28cfbdece6528f7cd80f94f4fc5f6
SHA512 f9fbebc2256f5c1f78bb2cbd5e909f8205b73154ad19367359fcc01bb089cf6960334128a9f08e095fed3257ec38f62ab7fc082995114e6dec1032c3b62482a9
TLSH
T1C1814C43D9E13CA5D96840A3F88E0FFE5F5F243B4EB99450468E1F66639F616721B010
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 8d27a7a0fc440cb903512c1653bac6a5bdfd6b2d5f486d8accf6b699abc74c39
MD5 e8fde33d7cd1e4d0c92d9b66e1595ae5
SHA1 57a9bc1cce013923ff398d59a89ac2a3728bf8e8
SHA512 fb323977c67edc1f61d6d518b0f08af937bb13ab8e1581e669409d9cd2cfec22e3488a26d1f08769ec55d65c7f53e77a9db9773f5ce73fde53f2168452d64546
TLSH
T127716C83E9A03C55DAAC1473E88E0FAD4F5F603E0DF584904A8D1F6756AF616B22F110
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 20db2460b91bded83d73fadb43ce93dc33777ce3dc8d47ab78007f47fff0ea0e
MD5 9241f60c92a77f7f9ff6360d060639b5
SHA1 0eca4d55e9eb46ae9c08e262ec1bf841428f8024
SHA512 a5daf206085e19cd714862b84b2115c10c68787288e046009302255ef0ee6c8cd99c76584c0203442ce6118b73cd2b12654db63e6843134c941bb6491c1ace38
TLSH
T17F815B83DDA13C59D9A804B2F88D0BFE6F6F203E4EBA8450468E1F6A529F51A725F110
MD5 SHA1 SHA512 TLSH

Submit Download

{c01bd922-2a39-45fd-9139-28810eeef7c3}.final

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cdy1k0qh.default-release\storage\default\https+++yougame.biz\cache\morgue\195\{c01bd922-2a39-45fd-9139-28810eeef7c3}.final
Size 2KB
SHA256 8023ccc96cbae939ce8c0228f485a91ec99897f0d193943c9b7f67420cf0913e
MD5 abc26eece709f742a5f8562e0957f4a6
SHA1 59b79a596be3bf591c380a4815eab18bfd0effd3
SHA512 66a1fa9a5c417da832220bd79be3ab21cc8df582a9627bf8fa4fd662b7a45b21e6bf02fa8bf2a7a1c41e59f5a80aa6e93b9d58646648b22eb15c2a444ab9ba08
TLSH
T173516D27C8B0EB82842066A8FA81A9930F64C523E685D6D0CDBD1F2D34ED346B083CC5
MD5 SHA1 SHA512 TLSH

Submit Download