hxxps://google[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/10/2026, 19:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://google.com
Sample261020-xq7baav13p

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 20 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	5260	firefox.exe
Token: SeDebugPrivilege	5260	firefox.exe
Token: SeDebugPrivilege	5260	firefox.exe
Token: SeDebugPrivilege	5260	firefox.exe
Token: SeDebugPrivilege	5260	firefox.exe

Suspicious use of FindShellTrayWindow 8 IoCs

pid	Process
5260	firefox.exe
5260	firefox.exe
5260	firefox.exe
5260	firefox.exe
5260	firefox.exe
5260	firefox.exe
5260	firefox.exe
5260	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5260	firefox.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 2564 wrote to memory of 5260	2564	firefox.exe	84
PID 2564 wrote to memory of 5260	2564	firefox.exe	84
PID 5260 wrote to memory of 4372	5260	firefox.exe	85
PID 5260 wrote to memory of 4372	5260	firefox.exe	85
PID 5260 wrote to memory of 4372	5260	firefox.exe	85
PID 5260 wrote to memory of 2396	5260	firefox.exe	86
PID 5260 wrote to memory of 2396	5260	firefox.exe	86
PID 5260 wrote to memory of 2396	5260	firefox.exe	86
PID 5260 wrote to memory of 2396	5260	firefox.exe	86
PID 5260 wrote to memory of 1256	5260	firefox.exe	87
PID 5260 wrote to memory of 1256	5260	firefox.exe	87
PID 5260 wrote to memory of 1256	5260	firefox.exe	87
PID 5260 wrote to memory of 1256	5260	firefox.exe	87
PID 5260 wrote to memory of 5804	5260	firefox.exe	88
PID 5260 wrote to memory of 5804	5260	firefox.exe	88
PID 5260 wrote to memory of 5804	5260	firefox.exe	88
PID 5260 wrote to memory of 4492	5260	firefox.exe	89
PID 5260 wrote to memory of 4492	5260	firefox.exe	89
PID 5260 wrote to memory of 4492	5260	firefox.exe	89
PID 5260 wrote to memory of 4492	5260	firefox.exe	89
PID 5260 wrote to memory of 5020	5260	firefox.exe	90
PID 5260 wrote to memory of 5020	5260	firefox.exe	90
PID 5260 wrote to memory of 5020	5260	firefox.exe	90
PID 5260 wrote to memory of 5020	5260	firefox.exe	90
PID 5260 wrote to memory of 4520	5260	firefox.exe	91
PID 5260 wrote to memory of 4520	5260	firefox.exe	91
PID 5260 wrote to memory of 4520	5260	firefox.exe	91
PID 5260 wrote to memory of 4520	5260	firefox.exe	91
PID 5260 wrote to memory of 4148	5260	firefox.exe	92
PID 5260 wrote to memory of 4148	5260	firefox.exe	92
PID 5260 wrote to memory of 4148	5260	firefox.exe	92
PID 5260 wrote to memory of 4148	5260	firefox.exe	92
PID 5260 wrote to memory of 5620	5260	firefox.exe	93
PID 5260 wrote to memory of 5620	5260	firefox.exe	93
PID 5260 wrote to memory of 5620	5260	firefox.exe	93
PID 5260 wrote to memory of 5620	5260	firefox.exe	93
PID 5260 wrote to memory of 2692	5260	firefox.exe	105
PID 5260 wrote to memory of 2692	5260	firefox.exe	105
PID 5260 wrote to memory of 2692	5260	firefox.exe	105
PID 5260 wrote to memory of 2692	5260	firefox.exe	105

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://google.com"
1⤵
- Suspicious use of WriteProcessMemory
PID:2564
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://google.com
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:5260
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2040 -prefsLen 27099 -prefMapHandle 2044 -prefMapSize 270279 -ipcHandle 2132 -initialChannelId {fb66ad36-4ad5-44d6-8da7-3ff50764988e} -parentPid 5260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5260" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4372
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2532 -prefsLen 27135 -prefMapHandle 2536 -prefMapSize 270279 -ipcHandle 2544 -initialChannelId {f51efa02-6aa9-40ff-8879-3a77b311f9ef} -parentPid 5260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:2396
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3760 -prefsLen 25164 -prefMapHandle 3764 -prefMapSize 270279 -jsInitHandle 3768 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3776 -initialChannelId {7ead0956-9da8-4be4-b074-7daab1d0a824} -parentPid 5260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:1256
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3944 -prefsLen 27276 -prefMapHandle 3948 -prefMapSize 270279 -ipcHandle 3812 -initialChannelId {a36be5a6-e2ad-4139-a4e8-64a199e2547e} -parentPid 5260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5260" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:5804
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4428 -prefsLen 34775 -prefMapHandle 4432 -prefMapSize 270279 -jsInitHandle 4436 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3308 -initialChannelId {298d18c4-ce48-4d52-a01a-2fc69e0c765c} -parentPid 5260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4492
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5020 -prefsLen 35012 -prefMapHandle 5016 -prefMapSize 270279 -ipcHandle 5036 -initialChannelId {29bfea7b-bd26-499e-8290-b88651ec4f42} -parentPid 5260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5020
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5148 -prefsLen 32952 -prefMapHandle 5152 -prefMapSize 270279 -jsInitHandle 5156 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5164 -initialChannelId {c2f98b58-1f66-4950-8cf6-767d92957a22} -parentPid 5260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:4520
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5232 -prefsLen 32952 -prefMapHandle 5236 -prefMapSize 270279 -jsInitHandle 5240 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5244 -initialChannelId {63a01001-ce54-40da-8cdc-606c2270ddaa} -parentPid 5260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:4148
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5548 -prefsLen 32952 -prefMapHandle 5552 -prefMapSize 270279 -jsInitHandle 5556 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5564 -initialChannelId {69f8df88-57b1-4ede-84f5-152aae93da5a} -parentPid 5260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5620
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6132 -prefsLen 36845 -prefMapHandle 6060 -prefMapSize 270279 -jsInitHandle 6232 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3344 -initialChannelId {e5146e2f-b16f-4827-99a3-fe9e2ed16e67} -parentPid 5260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:2692

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\activity-stream.contile.json
Size 4KB
SHA256 ca6fdbe2e8e776d92a03b52f2f3f6037b540d0b2f8d80a7e699c751a6c353ff7
MD5 f3647dff32bdc96d6fc8a4695384bd25
SHA1 34a07e56ee2547a4f04f44bd48a51e35864e29c8
SHA512 430892b81ddbf5baf85a4cca98e03e90a62e02e18269cdb49872d70087d78a4587484f7077f64a394ebb2cc5d3625451386387c84d7284b011d69960ef90a79c
SSDEEP 96:Tu/tMn0YJfmkl36YXT+mRdaJlon4KY8z9qr6DTxJzPlz:KVM0YJfBlKYKmRdaJloTcrwTxJLF
TLSH
T1EB91975B847848521F30B5E56D0F37ECF00BB046E9E49A5CB27ADC7185E8BBA80DB984
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 071eaca3cd70bf3e74f2b8e7cf39f5271a3595abb073f894e442430a9dbef279
MD5 8ba526de3fc1ebf476c772e4559fe0ed
SHA1 64f86a1fe2a717318bfc25bb330521f1ae49acd7
SHA512 55899fed3a56fc0b689936f64f96f8c9320bb75b0f851e7faa495481f0708971a95529726253ea9ec265857f742e9055df10cc5c1946e74675db26a7f81ff3cf
SSDEEP 768:xyjt48QsDY00jh8PBpWi+wJKmQPRHic751qOOrfwXETd+G0PsWAF7EyrKu:AjtoCtJKmQpH5j0TUGasWuJrp
TLSH
T1CB7309B3E6E8B1FB0B9077C72C0F799B62E20195E34506CDEDA9C91C81DD758123E5A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

13815

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\doomed\13815
Size 6KB
SHA256 88d27d90982d438f833dd68ade139b50a3e759a9baf56de2fd096380d6f22bf2
MD5 ac5c3443d541fb39290cf121f432a928
SHA1 6a78887de2ae24f8ea6aadc287b7d5152a724eb2
SHA512 9de69f233497e9d054c37edb96c6e5920c43dd83108d419bff15d5d3301a39e807f5a643e7bf2205818aa497b1cb45941d579f4783e7112e8a487206a5841b3e
SSDEEP 96:ROD+toRgbxV3pkYctoRgbxV3SivjCfgp+fY3GBGn8CGn82:eRg7C0Rg7CWXp+fY3cK8CK82
TLSH
T1BDD12A3F8E0530151BD796E3C14A5A9F3C54B947ECC74DAAE1882346EDC85B06AA909F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27780

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\doomed\27780
Size 9KB
SHA256 d03e48b376d1a491c8d836dade4ac6c93501be62d58b84f8040aa4f48fd032bf
MD5 f91f567fa1580bd329373d7352834288
SHA1 55490493d1a7dd22874cdc15691155ae9f5c8a12
SHA512 b15e36f1a2e139b7e746d7dbb18e2b9963e1f33ead15197b345a38b03e4ecd5c7e483f373e4a298cb8df4cfbd59e3a977ee8f8ad4923049e61138531654c14f8
SSDEEP 192:u7TtdRg7C0Rg7CWXp+fY3wtATOxAtATOxd:uJ0gp+u/0v0d
TLSH
T11A227C7B5E12391609E0EBD1C01BB0AD2C00B687EDCB9599A78C079BDD9C5F46EEC1C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5207

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\doomed\5207
Size 6KB
SHA256 c6b51ab1b00ce3df524e29691858fbe31f16b511a2818a6c49f9b7db9a699f41
MD5 9303c711bd22f185d8f6ebdf76c7c9b3
SHA1 fb1608fb00a3351513af03b4421354f76b33ee97
SHA512 04f2105abf7c4ad93f5d84777f5cafc669b4062872c416f3a360f1e5442802cc1c74290262052a2a176695e73b43db56a2154461ffa5884671a0567e8a1aa2c9
SSDEEP 96:tOD+toRgbxV3pkYctoRgbxV3SivjCfgp+fY3GGGn8lGn8I:6Rg7C0Rg7CWXp+fY3XK8lK8I
TLSH
T184D13B3F8E0530151BD696E2C10A5A9F3C14BC47EDC74DAAD1882346FDC86B06ABA09F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

07FA11F0C59C4EDE172C6D436E90D1AA460038F4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\entries\07FA11F0C59C4EDE172C6D436E90D1AA460038F4
Size 352KB
SHA256 48dc7bdccc61438c2aff404164fdc2e2a366dcb0dcb3bc61f3a86fa2f31e37a2
MD5 b3fd246b872f3397f71b6a28890b2b1e
SHA1 ef128ba4f6877b0097da75118923f6c935508f6c
SHA512 b7b8c1f4be951ed1849b5828119cd2bc087614b0a69198cc551fd0344d23fbc8ad07bee8148a062767619b7b93af839ea97c129fb17245dbe4c8d273a7aa360a
SSDEEP 6144:5JterkJiB53lK9lud6XRJs4GqwCXjiKjvZbJ7qVZQf/C2v4gOcpv6kWWNbQV:5ebsk6zGqVZt70Qy2v4gth65
TLSH
T1917423291F5B760D59889B50ADDA3B918C659BBD9501B8FC920386EDC609FF9C2CE0CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

82F4CDEDC8A08E6BCE520A4114F15825F2E886F6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\entries\82F4CDEDC8A08E6BCE520A4114F15825F2E886F6
Size 95KB
SHA256 e98e6dcc5cfe16e1b2b66e8b7d23dd92a6844ad1ad6979e0f0f2adbaca64a2bd
MD5 c4442de5562f48e2b6dae46d277240d9
SHA1 0ebe92195ba80e70f7827b63dbd31c7d5c7a80b7
SHA512 843cb90b7069de122ca293996bb090c9eaecd56b146b47e59ebc9ca8f2bdd18a4e6225b5e62acb3b7a5522a9a2988a5294651eb3711fd66aff9afa26c3a7abe9
SSDEEP 1536:yMe2dQ5NbBuwSSpeI5GcTDlA8JyHadBpAp3p7b/p41cY7jTU1izOu/HSoZIWcBMW:tG5znSSR59T/JyHaLpaZzpZWHuWxC9X
TLSH
T1629302A69EBA91630149CEE3D002243B39055B07F4AAD8526F84E6E5FC9C3D95CDC1AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E9338C5CCF1E2FCF149487351399F198A4F9FCD6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
Size 16KB
SHA256 3ae9e4b1fc7e0f97e4c86c2b6d05348c276b132079e3075d9ba8fb2314f48c67
MD5 ea8f049f413edb54f0d52899a2d6934f
SHA1 1a95c6f76694063853ce0b7145f5bcb90e363fd6
SHA512 08943fa47b407bf91bd5e0d8fb3b83b8f92a5474df5ad1f58c5b6085e05ebc1e1aaedc699582abf95e65bb8f354c4baf1aeebad9e85f354129170b0dc801ab41
SSDEEP 384:HGNQiO024YTWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAZ:mDZYTWTToXJWTTogB7S/AmVAf+hRMA
TLSH
T14A729E3D8F013CAD275780E9C8B583598C18B6EBDFF6C06D12983D09C988A6A71F945F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UMDJt0IbqcHGlKHUmO7_p1EpjGZY7pL1jxvEIan+eok=.ico

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\jumpListCache\UMDJt0IbqcHGlKHUmO7_p1EpjGZY7pL1jxvEIan+eok=.ico
Size 691B
SHA256 6574e6e55f56eca704a090bf08d0d4175a93a5353ea08f8722f7c985a39a52c8
MD5 42ed60b3ba4df36716ca7633794b1735
SHA1 c33aa40eed3608369e964e22c935d640e38aa768
SHA512 4247460a97a43ce20d536fdd11d534b450b075c3c28cd69fc00c48bdf7de1507edb99bef811d4c61bed10f64e4c788ee4bdc58c7c72d3bd160b9b4bd696e3013
TLSH
T15D0194C2B2203025F81A82B05613C895D04E81EE0998A42A8CA7D1F6A848A23958EFE4
MD5 SHA1 SHA512 TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 ab041672890a1c399295e8f9694765f4bf3613a4c00773431a41be79246b86df
MD5 33e1d383e236a0bf1156fd2fa5eb2a7a
SHA1 6a33fdfe188d5a119b8423e2b1228a68a3702507
SHA512 f4709a456349b125aacc37c29288bc252028aeca9eab21cb808ce190e027a43dcc1e0692d18f045c4a620436a66820d2c1d465d8daf51e02cb968eef991ebae3
SSDEEP 3072:j3lFHucvn/eQcMFBNKevdrxv1MrphsVcJ3:pFFnmQ/rKe1rxih/3
TLSH
T1AAA3AFFACFA28D3D54FFD42D5A82C83EFD262444B3E73009C923671561C6BB46678A49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 7b53584fdca5716fd83b1d4d241af398c81d3bde38ce183fddc3530b025c46ef
MD5 91404c97054a12c8d0bb6e2968f353b7
SHA1 d8c0c47a6392393d3c9037885b3c57e325a6b9ba
SHA512 7febf64ec53a522c9af40eae6a70e9185ba832befd5552b610a5109ba192645abc07afd2aa4207194bf14d5d1f5785178ea2989c2e5b14398ac59843af1d1ef1
SSDEEP 3072:X3lFHucvv6CMukwcuFBNKevdrxv1MrphsVcJy:FFFv6Wkw9rKe1rxih/y
TLSH
T120B3AFF6CFA68D3D54FFD42D9A82893EFD262404B3E73019C823671461C6BB46678A49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\AlternateServices.bin
Size 12KB
SHA256 47c9bfae04b32a3f6380aa518ad330aa34635775382b454262948c3db3c0b000
MD5 7f7c8f02bdbfac63e33511a22e49459f
SHA1 b39f27e2200f3edc32d62eaadf96cd221bb9bb07
SHA512 a05682d724e5cb8854614896ef4ef05cbda6d86ee2e294ecca7faea352129beb8db02350aff20d9623d08e4572f954f37f2b20c866d184d93f1ea25a476dec18
SSDEEP 24:ERuhMZS19VqFz9VRd465q9F55A5rWW9VJQ7Z9VOkW2W0WN9VxWAZwO+lzK:E+fghRPI56rDHC42W0M/pZwO4
TLSH
T11642A6F36FB268B2F0528FB0486D74588C73072A2469D188C645A8F25381EF5D17EF78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\AlternateServices.bin
Size 13KB
SHA256 735bd44c4b69f32c3cda2338672fa922bccee12caa096d7bb6efe84c9cd75619
MD5 5ac054c6314f3e4269459008074d1713
SHA1 dfa582962c088415b56eb023a9d824085781d8d3
SHA512 0207930255ccf420084a65a9895c63e54d97ebf909f7c4bb350cd45d55adb7e254d934152f9eb8d354cdaf4f40069324a73d5ed81c3ecfa08cc1498bb89fa73c
SSDEEP 96:E+fghRYI56YZh7vCyx2UbyuZ3YM/pZ349y8tc:3H222ZZoQ8Ft
TLSH
T1B95242F76EB164A2F1628FB0446C745C4C731329686DD1888645A4A25381EF9D1BEF78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\AlternateServices.bin
Size 8KB
SHA256 89d1367f4735e423781bcffef702659535305daba71331ef14ce8403141b4ac9
MD5 484f04e9fe6a916d7931281aadfc09a8
SHA1 76f1317b8326b5a8b3b11d02fe9a274b4a717494
SHA512 442ea8232f91a8e4404c827176d04f28ee2084f7b308db2c7fe644d497c53bdd7822c65c04b2a6522b780fcbf00d5f848ce3478dcb91251918df4c15d4fa3173
SSDEEP 24:wuhMZRt9VSKg91ue9BGn9xddx9Vv3ds9li:0nzqIkM91DBNeQ
TLSH
T148024CF76B71A0B3F092CFF48058769C9C330326142D9188D60590F347D2ABAA17AFB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\AlternateServices.bin
Size 12KB
SHA256 62bddc680654ced7e018e0c5c4e38d39c44f2e73db39fcd1e864183a257869b0
MD5 50c5960348adc5c840aa78db09afdbf8
SHA1 df1e1dc61c67bda7b9c9bdd40db3a375738ec939
SHA512 1d6c5aba699717d0aac5dccd399f42a65bd12574d7a98e1e322f97d157a3b94337fcd834b43fab0abe120ee6bc85decdfa45f22fd4d49a58e8663e0c6da780ed
SSDEEP 24:ERuhMZS19VqFg91/+r9BTz9x3x9Vv189lojx9BbRgWN9VxWA5q+lzc:E+fgqJ+JhhtDB1uMD9RgM/p5q4
TLSH
T192423EF76B7160B2F092CFB08058758C9C331326642D9188C645A4F753D2EBA90BEFA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\addonStartup.json.lz4
Size 4KB
SHA256 451c7f6a497f3c5cc512ddf2313807d3e3d87f223b047a24d289903c3b64a81e
MD5 1060e39cfa693d825ceb57af48cc47fe
SHA1 4a0383e4bccdd977210fbb56cd0d2ce364d22403
SHA512 d45bd306fe734fb6ee50873f896b777519844be1a4e33f340e452844683e3f953c43475e2c76cd560e169591aad2a6c6bd24dfd7cfb5d7a6a554aefed75ba0db
SSDEEP 96:NAR3f4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:NAty52xxhD8rGvm6ApwnHUuhN
TLSH
T161A17DB6D542EFB1FE32C04348D53FB2E6AA9B3410A9C4D4F1AF71194C64A732704340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 30KB
SHA256 3517a6d0c83e58d7fb849675f000df9937fb36772e990a7528859b81893a0638
MD5 4267b1247d166b764580353dbaa161f9
SHA1 1b10b0e05af935e701cb2ff0c45374b66df6a945
SHA512 4d2e0aad1f56f381cbb475e2231b6ef6df2f3b02e0f35b5e3342d8c27292a883544aac5a62f42bf5b9dc5b1cc7dc6ec0bc782f68ef9d1c10f1b157838fc1776a
SSDEEP 768:13Jy9U/4KHlf7IGcmhucGUyKqs1DNbwbgv4E/:fy9U4KHlkUyip
TLSH
T19BD2F044FB2A953FD41513BBDCA51B002F79B885581A2F9B3A4C64686C8B2DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 65d7adcfe00ada312cc6500656b48ced0a4941a2dffdda56e3a94ff67725563a
MD5 2dd63f58403c29155b37d106e25762a0
SHA1 04dae0a1728d9e917deb5c9693b42a63d4f70476
SHA512 bca6077b3aab8065b37fc322b2f7cd28ccff97d754ea835de8270456888c41f1b59b84db606ed8715ef561ee9c895f535024a3495ee95f863e5bdd07a3e56f90
SSDEEP 192:m1d66JozGzgCl6mc0dHOv5zboP7ZoCyj/MN:Ad66JozGzgC1jqboDZoCyju
TLSH
T15AE10DA4E628863FC404037BDCAA1F410F39389BDC4E2F29769D645C2D5A2DD768E1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 5c630b612199407fbd19846463f384caef496edf98a83ab6301a511ba90f99e7
MD5 8019dd57f78853ee9d2f379c45ae6103
SHA1 6e7f1e5ae3fadea615507db9bf52f7a8265298ec
SHA512 a11eb0a4aae7c5954620d035f263fbd40f479ad83f4a010e78c989ea0432fb5463642ec53ab8dbb6d1e93e0ef0c81e3ee1fe3f18b7ef20ad1e0f60d1cfa4197b
TLSH
T19461BA98F228863FE4444239CC961B412F34745698AF7F2A76ACA14D1E1B2CD768E07D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\events\events
Size 4KB
SHA256 94dcadc3600419b8a7942bb7ef5ff90793787bbb989fee94331835f32e89115e
MD5 7ea2a0a9afba7b69258f24ee8fad845f
SHA1 92d91afe8f39893f94ffcda56d8d7de9248506c0
SHA512 7eb2892efdbd4247d11e781aaee1a21c80059283920623ca571fc2d1ef9a8989dd110d6b01dd10adec331a34fe258cd9b0ad802f32d1ad9f3d3e48c59dee4f9b
SSDEEP 96:3AMdRCdrAJO5RgCyOze04Vw5I843sFqF/E4Bhk8:3AmRkrAgjyOXewN8sFqVEYk8
TLSH
T18BB1E01CAAB91CBE68CBE29CB840438D478D8707D1C71C8B4DEBEE49CC9665D325E479
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\events\events
Size 1KB
SHA256 f5a760d3455c904737844743c01f206ad42905b3b558a6b064e64049d99dd412
MD5 53fc435bf670028c94db279a5787e059
SHA1 41065bf85ff5e103052ffab8102bee8ba36b1076
SHA512 83528628759c728446895f8decfdf1267422da8cc2c2813ca50537f75843854e1001eaf8a2030c305e79e67f7428eefadeb158effbb2815b220dd9703ac84067
TLSH
T16B21674CBDF94D7AACC7F69C7881028E53558A0B14871D4B4E03EF8DCD95AD932AA43C
MD5 SHA1 SHA512 TLSH

Submit Download

69bb3e58-5036-4557-b7b1-cb25c3a4d923

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\69bb3e58-5036-4557-b7b1-cb25c3a4d923
Size 235B
SHA256 92527cbeef89e97e0c2eccb714df9737766defae061d168fc6dd99492571eafd
MD5 843e1cd850096f4c49e35a954e41c851
SHA1 7954f921247a20e72ea7649fb28a45581c9a430e
SHA512 55823289672dc80cad8bde4a5b2023009c917e9b4d95377895a1ab33d67c1f74aaba61ff9a6ab6ca5d4c7b8435aaaeecb13b0ac8bc4e73fa1264b339f33efc62
TLSH
T132D097842888236D58240F07B0A16EE630558C3324B5981086A106388DBEEC85191817
MD5 SHA1 SHA512 TLSH

Submit Download

6c39239f-d5b8-4ebb-a6be-b4fb12efb45e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\6c39239f-d5b8-4ebb-a6be-b4fb12efb45e
Size 2KB
SHA256 fc67a4f0542f43de461cc2adfbb645fdc65d9260f4dbe8910c353c7ba64426ef
MD5 d21cf815c46ef2e4a6cdb3eb40aec680
SHA1 4dd74c715639a40f4b9b68a9384df82e77a9da15
SHA512 337e8082eeb0bd4b18abdc892bee071a903b511b86932392fdb4958f7b5860dcbaaae03d82ac123f1ee785afb5a3a0a3844de066f93ddb18c8352a2da75e7e40
TLSH
T16F41235875B84C3A9CDBF25D9091338E53B48D9340C62C837E51EE4C8DA575D33AE82B
MD5 SHA1 SHA512 TLSH

Submit Download

e2ad01e8-48f0-4a74-81f6-4f6d6dcb3372

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\e2ad01e8-48f0-4a74-81f6-4f6d6dcb3372
Size 15KB
SHA256 4831430331ae358b34263e02f619c9c2f7d477641bd4a8b7d7cf118f059cd987
MD5 60c8fd55864479eb5bb22a2edd3110fe
SHA1 39437ee891382ebf4926ffca3f877279c7b7cbe9
SHA512 37ac8226c0055747acb0d3bcbe9390379886c62d832fe23f4272f74ff68e00600b529d098fe737b65ee2139a0ec72ff400115180701102c0f41fcfe975ddcd21
SSDEEP 192:ydlluHJ7h0e9+p/CLy8HzNhzaucFP/uJRAwzxi9fecd11czBkDP5taBc:yd15IhzauYPGJRAwliLZczutWc
TLSH
T12972C9562830497A8651E3A998FCBFC3E2F528CF4C419FCA9BE4BD085DDE06D112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f579a289-c3cc-4e39-a7c9-b446e8b8f5a5

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\f579a289-c3cc-4e39-a7c9-b446e8b8f5a5
Size 886B
SHA256 6753ffa7ed327ec1555c4c04833411ea1b673298a6c325e338fa873c65ea124a
MD5 a644885dd8e072a2e17c5797e96935ed
SHA1 95d8f570b18414def1ddd63b6376c9ab71099ab2
SHA512 61c29af051353da4346b5091eb76e541f8f67b5fceeacba64fdbc602fd00b32e6141c81d3d6ab4f4639ae5c8eca1d263e695dbf2082b60a241a53730f78e4aa3
TLSH
T1611100809535F8B68C28D25B84F9770393F47473C0DA0924BFA15A280EAE61DA36B227
MD5 SHA1 SHA512 TLSH

Submit Download

fb8b6cda-a4aa-4dd9-a867-1c2bd3b048c4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\fb8b6cda-a4aa-4dd9-a867-1c2bd3b048c4
Size 235B
SHA256 92f0f25b27d51733345164eecbc98288584700c2829363a2bf12df4133319143
MD5 68cedfd8e6447197c60126019d84df6a
SHA1 5fb967423a13b8e8a6f2e6b993a246b0f52f06ac
SHA512 25d7f83b5ca166f6bc551766d4fd5bf128a7685eda9018d31ad0300a42b61a01fadb56296d9771f292dfd6d0ef76a8a0be0900224167b2ec3fe16f9bf289f8bb
TLSH
T1EED0978138DC6F7C0C100F0BB1E179CA32488C3320609860E9A18978DBBE9C84311C6B
MD5 SHA1 SHA512 TLSH

Submit Download

fe19adf3-738e-4f35-9c83-cf430de0b37c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\fe19adf3-738e-4f35-9c83-cf430de0b37c
Size 883B
SHA256 c96d507738053d631b6339009b5dab57f6b5be6dfeda10bfa0b86d807e5a8537
MD5 f2e698f108ea170cf7d22d9105439286
SHA1 9ebbcebbccde691d409d015c9ea049efbd71cc36
SHA512 3f13bdb54d035516be089f3e4c0ff7a0ce7aa58bb4c906c8ffaa4eb659d6735fb973de6eb5dc64b43fce2abe09dd4e2928ed9456243510416768f8fda1152156
TLSH
T1FD1100819531B566DC6CD24BC5A53B02A3B87563C0CA44143EA55A284D7EB2DA36B246
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\extension-preferences.json
Size 942B
SHA256 2f56e841373edc1cb41d946163df4cab5ce7d5cfc8b8816115628c35031f5656
MD5 ba1f2874a20e86779a35b437c0d6d065
SHA1 f232cb2597cf5ec4477d9ac0bfa43c756c7c77b7
SHA512 18023b5ccd5838aaa9e3614bc62ec83060304e112ec36184c464cded6e8bfcc98d3efab57ea8c3fa9653052e61bef92784764b6c184b7a61987bce3be1b46057
TLSH
T14711F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\extensions.json
Size 14KB
SHA256 701addd9ae4f25abbfc748274a89f5f30320706cd4eb2c8a73955735e38d7e53
MD5 73cbe49dad4b470645a2a3fcf85b5310
SHA1 09f7410b334ed84caeb5e5af710da2e0f3bc445c
SHA512 30ec0878882fde9075a55cb0ecfeb604f1bd772c87f0eac2d92c30342b128657f76b0928cc6ccf634fc693459ca3d00c32e8ec420910d45bae163ef5bd06109d
SSDEEP 384:qxkI4vmUmldvb8dhWq94zQ96oaL4HAL4PrL4H8L4HbL4HC:qCI4eRfIXn4o6X4C4f424n4i
TLSH
T1B562421545049EB8294EA78BAA367E01C37D473B70845C78F4DD8FC842FB5B902BB66B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs-1.js
Size 6KB
SHA256 f0a18d1844e758003844c67f01fe30172dd7f856ea41584e995d1e130e3107b8
MD5 40b3bd492465b811cabafae10e68d959
SHA1 d8b9d7fe837e446f4fb96b023418ca010b7fe4ce
SHA512 f1ef2009b4bb04a01ace88e8b05455359d06233ec6945eff4311fba39e056ec9fa69da15e958bfc80d93c39e300f621dbed6ec93364cf0964f420fd0866d9ad6
SSDEEP 96:xHlwUTUnqGqEfxb5n1zSj6SSlSdv9j9HnHRHZlejyiBw88n8L4cnihK:0aREfxNny6SS2n9ZTiBw88k
TLSH
T1D3E13F789408CB7F74B6766CAC6889316AB2023B7BBF68D650B554C4051CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js
Size 6KB
SHA256 f88bf59d311f4c48e51ffd0e36e3aa76d441b3e67a6a9c42d73fdb2be01f5ae2
MD5 69e2d467ece25a19c291f729ade0033c
SHA1 5d852e2e858bde4d390de6aac67c580404bb334f
SHA512 99b73f9616db6beb461973782e38f5e4646181c365e305cc87307a7539d2c756759bed6ac4960248a04a98419b709fd8a03570072129765cec1f80437bbcb0e3
SSDEEP 96:xHlwUTUnqGqEfx/V1zS5SSlSdv9j9HnHRHZlejyiBw88n8L4cnihK:0aREfx/VQSS2n9ZTiBw88k
TLSH
T1D9E11F7890088B7F74B6776C6C6889316AB2013BB6BF68D750B554C4055CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js
Size 6KB
SHA256 0b5d9afb36edd02d6d95097af4de35a190ed7affa36ea1edb8b655618c5fc85e
MD5 aa61cf2aa486768ce9946f225f865be7
SHA1 4d0efc727af4a13d1405d0b9d1c5a22146cf920b
SHA512 40d5606e2df0d891bf2c17dfcd87131a66586b689906a05611bbab266aa5111ffddd2668c8a4acc5c1e7011b5e977e92baeeb4b8e74ef81b1570202b727395d7
SSDEEP 96:xHlwUTUnqGqEfxb5nObzSj6SSlSdv9jnnHRHZlejyiBw88n8L4cnihK:0aREfxNnZ6SSW9ZTiBw88k
TLSH
T150E13F7894088B7F75B6376CAC6889316AB2023B7BBF68C750B554C4011CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js
Size 7KB
SHA256 b90225e746bde55072cd428b60e62b11c0c704438ba57a1de98dfa84649b653f
MD5 085b789264375e954cf919f5aa6215f8
SHA1 93f5dd7f9494c0a766d301ffc95d5809b4a9e037
SHA512 9ada8b2f70dce8a2476d6cedf6b9d63f83459d1cc939dca77fc3cde52e3f6644c44ed37e21187b31a0956186c09b84f7775be3b3e2a7f7d722d7df15a85c31de
SSDEEP 96:xHlwhTUnqGqEf7b5nObzSj6SSlSdv9jnnHRHZlejy3Bw88AVg8L4cnihK:0/REf7NnZ6SSW9ZT3Bw88yb
TLSH
T191F10E789404CB7F74B637ACAC6449315A62013BBBBF68D750B954C4451CF3842FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionstore-backups\recovery.jsonlz4
Size 9KB
SHA256 bd3155da8a2dcc4d69359e858203a4103a742de39122ec70e10740396c89d952
MD5 693d68bba670ebe523cdf077fccdb7e1
SHA1 06982a0d91fd110f50bbf59b1d1ef9c2b09ee75b
SHA512 99cd154c9e68c9e026baf25eaf55692d38dcc7055a37883f8c56c647859dd79fd742c00c97cc653945e79ff15afd828d1848d5a6ee44e11fc51ef7aec736880d
SSDEEP 192:nV2lOgC60fkFx3nhk599fvXt2oGR12K08LaMck+k19e:nnTcF1+53tEASeXGe
TLSH
T1D612AEB7CFA67CC1D5E430E494F2089D9BBF0406ABE2AA94C3481932E1970C90A5C6F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 0bd72865e369bd361f6d40055f6c1c1b922d83900cd7bf18e717e6cf73d90311
MD5 1c87adf3336558d73ab20bc52aaa2adf
SHA1 d04f33d716df3f641d7fb0c618ff615a8aec43df
SHA512 073af05883a776031a7e2cfdd0e3b66b0d027a1f49ffd85a658b046e0f512784e1b2015e4bf95bd174ae7f12786895a82c6631b52f14fbbd0732956fac237d87
TLSH
T159716BB71C133CEB7B35D516ECAA4FE944D320A084EE80A4F62DCF1352DC5415A0886E
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionstore-backups\recovery.jsonlz4
Size 11KB
SHA256 6a35fe0af7791a2a43efac6bf5221b9ccddad821bc765ec06910255df176c763
MD5 a1ab5b9f99b090a97295dd766b509bce
SHA1 c861196450c25458a5fb41fb2293cd3f0d34f61f
SHA512 6f502729291ca8db4cfc6aea864cebf08dffc09b97450ebcf197ee4a528fcc21f4d9c89062843f0d88ba8de475c65e2f41c3034482d40ff540978cbdb1c5a030
SSDEEP 192:lV2lOgC60fkFx3nhk599fvXt2opv5hOy3+Z+Nzan4RuHBi0v/4r:lnTcF1+53tx5Uy3y+tFuHBpgr
TLSH
T17542B0EB9F632F9791747802A8EA0E2D1A4B15C3DDF15395CB287D31A4BFA05885C2DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 75928e2b1f8e1d5d7f67e0877fcace50bc6a9f7720a5b6b22dac4dde10c4d363
MD5 d29ed9a3c43168a42fc1260e2115ddc6
SHA1 b8f5a2e7fc2ac5a3d1bd50001385b1a696c22a53
SHA512 e01233a56c1cd1395cb4a72c45669a38e1760d98a200ad0d9ea79ca8b61af32c8018ffd3a89cc820530c4de76a26a78ace814065809668e73ae0fa20b03795f4
TLSH
T1C421C657A96B2EF6BF109159E448CFFEE70A3025857A44F0F19DED0262DE005774E02D
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 03e672182519c974d9c4607e24ffa41a4f728f1884cd450bf4ebd9dea15919f6
MD5 a31704dc86c62624b5fe4d05a9491a2a
SHA1 97b12ea8e4a89c980758fac5460a083131d354e3
SHA512 30699027be49d6f208e35ec2d35380feb46ab59c1b7797eb1a8da9fadc25c6a1775ab0fc587f086db88f2dbe59d5d884dd2c5e51aa601d8b35973aceb3aac086
TLSH
T155716BB71C173CEB7B35D516ECAA4FE844D320A080EE80A4F62ECF5352DC6415A0886E
MD5 SHA1 SHA512 TLSH

Submit Download