hxxps://bazaar[.]abuse[.]ch/sample/0d9e970507baf8216c3a338d09d24e47d78a500b3b20d08836a8dc0e0282aeac/

Analysis

user interaction
yes
max time kernel
52s
max time network
54s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
23/10/2026, 18:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://bazaar.abuse.ch/sample/0d9e970507baf8216c3a338d09d24e47d78a500b3b20d08836a8dc0e0282aeac/
Sample261023-wyncpsztfx

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 22 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3353145205-3618084634-580274525-1000_Classes\Local Settings	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\0d9e970507baf8216c3a338d09d24e47d78a500b3b20d08836a8dc0e0282aeac.zip:Zone.Identifier	firefox.exe

Suspicious use of AdjustPrivilegeToken 7 IoCs

description	pid	Process
Token: SeDebugPrivilege	4736	firefox.exe
Token: SeDebugPrivilege	4736	firefox.exe
Token: SeDebugPrivilege	4736	firefox.exe
Token: SeRestorePrivilege	3428	7zG.exe
Token: 35	3428	7zG.exe
Token: SeSecurityPrivilege	3428	7zG.exe
Token: SeSecurityPrivilege	3428	7zG.exe

Suspicious use of FindShellTrayWindow 8 IoCs

pid	Process
4736	firefox.exe
4736	firefox.exe
4736	firefox.exe
4736	firefox.exe
4736	firefox.exe
4736	firefox.exe
4736	firefox.exe
3428	7zG.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4736	firefox.exe
4736	firefox.exe
4736	firefox.exe
4736	firefox.exe

Suspicious use of WriteProcessMemory 44 IoCs

description	pid	Process	procid_target
PID 4380 wrote to memory of 4736	4380	firefox.exe	82
PID 4380 wrote to memory of 4736	4380	firefox.exe	82
PID 4736 wrote to memory of 2164	4736	firefox.exe	83
PID 4736 wrote to memory of 2164	4736	firefox.exe	83
PID 4736 wrote to memory of 2164	4736	firefox.exe	83
PID 4736 wrote to memory of 5596	4736	firefox.exe	84
PID 4736 wrote to memory of 5596	4736	firefox.exe	84
PID 4736 wrote to memory of 5596	4736	firefox.exe	84
PID 4736 wrote to memory of 5596	4736	firefox.exe	84
PID 4736 wrote to memory of 480	4736	firefox.exe	85
PID 4736 wrote to memory of 480	4736	firefox.exe	85
PID 4736 wrote to memory of 480	4736	firefox.exe	85
PID 4736 wrote to memory of 480	4736	firefox.exe	85
PID 4736 wrote to memory of 5696	4736	firefox.exe	86
PID 4736 wrote to memory of 5696	4736	firefox.exe	86
PID 4736 wrote to memory of 5696	4736	firefox.exe	86
PID 4736 wrote to memory of 2308	4736	firefox.exe	87
PID 4736 wrote to memory of 2308	4736	firefox.exe	87
PID 4736 wrote to memory of 2308	4736	firefox.exe	87
PID 4736 wrote to memory of 2308	4736	firefox.exe	87
PID 4736 wrote to memory of 3880	4736	firefox.exe	88
PID 4736 wrote to memory of 3880	4736	firefox.exe	88
PID 4736 wrote to memory of 3880	4736	firefox.exe	88
PID 4736 wrote to memory of 3880	4736	firefox.exe	88
PID 4736 wrote to memory of 5196	4736	firefox.exe	89
PID 4736 wrote to memory of 5196	4736	firefox.exe	89
PID 4736 wrote to memory of 5196	4736	firefox.exe	89
PID 4736 wrote to memory of 5196	4736	firefox.exe	89
PID 4736 wrote to memory of 1840	4736	firefox.exe	90
PID 4736 wrote to memory of 1840	4736	firefox.exe	90
PID 4736 wrote to memory of 1840	4736	firefox.exe	90
PID 4736 wrote to memory of 1840	4736	firefox.exe	90
PID 4736 wrote to memory of 3336	4736	firefox.exe	91
PID 4736 wrote to memory of 3336	4736	firefox.exe	91
PID 4736 wrote to memory of 3336	4736	firefox.exe	91
PID 4736 wrote to memory of 3336	4736	firefox.exe	91
PID 4736 wrote to memory of 1424	4736	firefox.exe	92
PID 4736 wrote to memory of 1424	4736	firefox.exe	92
PID 4736 wrote to memory of 1424	4736	firefox.exe	92
PID 4736 wrote to memory of 1424	4736	firefox.exe	92
PID 4736 wrote to memory of 5776	4736	firefox.exe	93
PID 4736 wrote to memory of 5776	4736	firefox.exe	93
PID 4736 wrote to memory of 5776	4736	firefox.exe	93
PID 4736 wrote to memory of 5776	4736	firefox.exe	93

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://bazaar.abuse.ch/sample/0d9e970507baf8216c3a338d09d24e47d78a500b3b20d08836a8dc0e0282aeac/"
1⤵
- Suspicious use of WriteProcessMemory
PID:4380
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://bazaar.abuse.ch/sample/0d9e970507baf8216c3a338d09d24e47d78a500b3b20d08836a8dc0e0282aeac/
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4736
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2012 -prefsLen 27100 -prefMapHandle 2016 -prefMapSize 270279 -ipcHandle 2096 -initialChannelId {936933fb-24d6-4de5-98f9-b2e9fe35faf1} -parentPid 4736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4736" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:2164
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2520 -prefsLen 27136 -prefMapHandle 2524 -prefMapSize 270279 -ipcHandle 2536 -initialChannelId {e2e159a6-0d1b-46ef-ae66-62563db99b7b} -parentPid 4736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:5596
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3788 -prefsLen 25164 -prefMapHandle 3792 -prefMapSize 270279 -jsInitHandle 3796 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3804 -initialChannelId {fdbf799f-3b32-44d0-b890-67cd12a3ed5a} -parentPid 4736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:480
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3992 -prefsLen 27277 -prefMapHandle 3996 -prefMapSize 270279 -ipcHandle 4076 -initialChannelId {bb8f6c3a-a487-4f34-81a2-afc0bcf79a91} -parentPid 4736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4736" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:5696
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4376 -prefsLen 34776 -prefMapHandle 4380 -prefMapSize 270279 -jsInitHandle 4384 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4392 -initialChannelId {02b91ee8-bf7a-4ecc-b55d-43dd27123bda} -parentPid 4736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:2308
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4280 -prefsLen 35013 -prefMapHandle 3748 -prefMapSize 270279 -ipcHandle 5028 -initialChannelId {19bdc261-94ae-4580-b3d5-abd26d309977} -parentPid 4736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:3880
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5172 -prefsLen 32952 -prefMapHandle 5176 -prefMapSize 270279 -jsInitHandle 5180 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5188 -initialChannelId {c2c357d6-f0c4-4e59-a172-52ad87bbdc05} -parentPid 4736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5196
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5256 -prefsLen 32952 -prefMapHandle 5260 -prefMapSize 270279 -jsInitHandle 5264 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5272 -initialChannelId {3aacbf2e-e343-41fe-a0b7-e191e6ef5f89} -parentPid 4736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:1840
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5624 -prefsLen 32952 -prefMapHandle 5628 -prefMapSize 270279 -jsInitHandle 5632 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5176 -initialChannelId {ffc90b62-6eff-4f0e-b264-3014cce472bd} -parentPid 4736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:3336
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5776 -prefsLen 32952 -prefMapHandle 5660 -prefMapSize 270279 -jsInitHandle 5916 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4284 -initialChannelId {bd233ce6-cf03-45c2-bbe7-186643d139c9} -parentPid 4736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:1424
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6336 -prefsLen 35065 -prefMapHandle 6280 -prefMapSize 270279 -ipcHandle 6348 -initialChannelId {0a895754-9002-4df6-9823-cd5c7ebfb2a1} -parentPid 4736 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4736" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 utility
    3⤵
    - Checks processor information in registry
    PID:5776

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5864

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\0d9e970507baf8216c3a338d09d24e47d78a500b3b20d08836a8dc0e0282aeac\" -ad -an -ai#7zMap23469:190:7zEvent27051
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3428

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\activity-stream.contile.json
Size 4KB
SHA256 ee6ae5aff0110bbcfe3369dd30163aec21ee40d4c17d269b581566a65cd54c93
MD5 0c6b89cdcc12ec1413b47f75a8aca9f7
SHA1 4ca410d3be855b99fb85ca48c50c308f90bd8b93
SHA512 62b2e18d85dc3fff7a46c6e284b90cd481ffae9d298fba5e35bb88c5f77d58db3649eb79418b3628c155e1307fa597a29594f251c9a10b795ca544fff59a410d
SSDEEP 48:YdbA1reDZRCyF7WMkwpqozyioAQnUmqp4JnreDZRiyF7N1HQXTiGjy6T+jiRCQnu:Trm6MfD8UmtmRNIfT+mRLXnkmQQWBplz
TLSH
T18B91C75BD4A486021A71AAE47D5B276CF007F055DDE5EAACB26B8C11846C7BEC0DFC88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 4f9ea52d3831d9c68a05cfec171f70b725f837edb1f09e25e959652ef06f3fb0
MD5 777ad726b421103393cf6e0c7f7b84b7
SHA1 b6dd5de35e5f354f3395c74c45261063b947c9ae
SHA512 3ecabb93b6dfb6abb5a8491683ff6d8ba2480d2bdf1b6ec457c6a43872d2f2ac8c3cad99005be01db56a7dcf6d2f7ac2f562ba069984bb25d9bdd663519c5753
SSDEEP 768:yy2ZuuqMDiBvXsWXognak51alkitJmlnTdQFmOPOOrz+GIQvi:J28u7FWXognRIlkdTdQFmOuG7i
TLSH
T1DC7309A3D6E9B1BB0BD137C72C0F795BA6D20185E34906DDFCE9C91C81CD654023A6AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 b19bd5deccebfd62fa5fd0ce145b42c945505d508faf1d895f12c6657bc7b3e7
MD5 9b9f463f0f9ecf7af0b18b75b982915f
SHA1 2a805bfc1ccc765bb0444751ca8d73c207d79cc3
SHA512 d232007fb7ae4fd54161d4c9a4d58e371e8c11fe3a270fb5e76097a09532c3b5097ca65b81e59a872a81f29ce46165a8d9c71e0537a3f62a7139645b70c0b7f7
SSDEEP 768:yyYiW7Q1VV2OavnTyvH++MATc0uueR6mswLTj84LVx7vNbHVxGbsq:Jf1VV2nOve+MAThwPj84xdNbHVesq
TLSH
T1A5730AA393A8B1FF1B9137CB1C4BBA9B62D50159E38501D9ECEDCA1E90CD654023E5BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E9338C5CCF1E2FCF149487351399F198A4F9FCD6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
Size 16KB
SHA256 acf05b528ab7e14275af5a0d850dec027a8469fcf303f4af54d491aedcd6150f
MD5 bc66d3a64cd678f21ed08f871f83ac1e
SHA1 8de743ac4fb2e5851ef0e06da3a5f3f2f144f18f
SHA512 71aecb87f18a6c0549b8290e8ed4f1a7384a2c9f3303d01e9ab4518a8332d695f934b2857b88f8ae9e78840c76e0777dd09cbc2f4925b279be73f2f1763d8fbe
SSDEEP 384:HGNQiO024YCWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMA7:mDZYCWTToXJWTTogB7S/AmVAf+hRMG
TLSH
T17E728D7D8F013CAD2B5780E9C8B583598C18B6E7DFF6C06D269C3D09C984A5A71FA44E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 3a3676965e98a9ee4cd87ff1d516a8266671c834069b069431a42ed88e1608fd
MD5 c7cc11081bb6786b8952714045202025
SHA1 5e8ee5143de6eedd22133dd835851952d2a6a312
SHA512 35c9abf1475b66352b79000d76173cfad3d452efdcb6a9cf8dc7d2c308e29ec14632add5a597fe827c900263f9a87d572a807559d7f1ad99152e1777eb14a5ae
SSDEEP 1536:XTrliEYMSPD3wlYrKjRndsXzx9q5woA3AIa3i49Fr4M+A+/t0LnI8W+rwzjctkpI:X3l0clYrKNYzx9dLotr4MsqnbcXZP94
TLSH
T153B3AFF6DBA2CD7C58FFD42C6A82843EFD266414B3D72009C9232714A1C6F787679648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\qxv393jy.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 180fff2a5b083d7c8260fae7a2d7c3adc9d301a92829b8ca8d0ffdc7f4c5d174
MD5 8571bbafe08a1d38a5a05d52920e20af
SHA1 261b42d21699197708e1e62b0a035766a613a044
SHA512 289e54d9de0cf5945cd5db7682f1aadc3159f07ef2f3b6d8dfdb94015b678bf26a117ce1f72c33cb428683c07a81703d2548cb18a196ddc0073bd0adaa69a539
SSDEEP 1536:jTrliEYMSPD3wlYrKSdDvcX6SE1Ik2z2444cFl4a+A+/t0LnI8W+rwzjctkpZpVe:j3l0clYrK0K6/a7al4asqnbcXZPe
TLSH
T147B3AFF6DBA2DD7D58FFE41C6A82C43EFD266404B3A72009C9232715A1C6F787279648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\AlternateServices.bin
Size 3KB
SHA256 2a799487b5d36d8ca515501c9ae1e3cd64571de656e89aa48958424c473c147e
MD5 2e9f725e6b91f91f80f6d0a1d9c2cf3d
SHA1 02905f9bda88a2a7581cfe2aeb37ee755a375877
SHA512 24c343c36a16f5a673d6d3ceff15e9d8761c5ae18f4afb492ad823c34717a6898e28154357fa239766087dfda359491ac5d74614dcd276e895b53023d639b8e9
TLSH
T11A81F6FB937364B3F0D94FB5906CB1C88CB312195AF54054166690D711836FAD0AAF2C
MD5 SHA1 SHA512 TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\AlternateServices.bin
Size 8KB
SHA256 6ee54e11451fe7bfdfdfadd21d5fc1ebebbda3ade3dee2665c88aa8979a762b9
MD5 9dff3f41d1b9436ff608e024c6cb4b59
SHA1 8fb266f972090a89f9f6c730ae0a87cf28b921b4
SHA512 f4f73d13b4e44303b45c4622a2a4d29ff3bd21f2fb662b30c00cc3ea2648c2bcdbb68a0b14cfeab3356e39cf2be78db5b4631e9d89bc561d6633609de8502a5b
SSDEEP 24:QiuhMZNsImIK7iaawZOfHGqYeGbGboKlq7gckSn:f+zsGgGbGzg
TLSH
T1160208FB577265E3F0E56FB5409CB5C8CD7312189AB08158572A90DA12833E6D0AFF2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\AlternateServices.bin
Size 10KB
SHA256 fb99167350b1a593a86fa51c694baa05a7c9ad6299a9c9be04fff5c285575bc1
MD5 06c1d23589a67ac3a25755c1ae3513b6
SHA1 d0ab0b4da67b6fa79b3bbd09e461e1a314153196
SHA512 13c6696b418b048f89d12b9641cafaa0f7b4321318db4f30b47685192d037097f6663fdc4aac77d9ed9dfacb6c0b28f34853211b00fad995a8be667c45e1acfa
SSDEEP 24:uRuhMZxwIdiOwZ7GqYeGbG7oV7gckJ+lz:fGgGbG94
TLSH
T1AC22E7FB1672A1E3F0D16FB5409C79C4CD73121959A480645627D4DA22872E6E0AFE1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\addonStartup.json.lz4
Size 4KB
SHA256 b93155047320a3590dcccf3f366fc556c53c34e01980b623577d86ac4e5bb340
MD5 9069815ffe0ab536db184d6aba4678a1
SHA1 459f37dfe53d8883c980f78d7b45415f65c2cbab
SHA512 b09542430ead68364234bb6bdb2eef46370018a3d167b5c57eb8b78d063e450fa298fd1eba8789dd18c4f7a3acf7375eb1209f5675881dbbb739d6aac13b0aa5
SSDEEP 96:N6IfgV4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:NBgE52xxhD8rGvm6ApwnHUuhN
TLSH
T1F9A17DAAD141EFA2FE32C04658D93FB2E6DAAB7410A9C4D0F17BB1294C64E735705380
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 8f3a9ef849fbdc7c453e02906c75d5d7ca1f307f806fdb67bd7b65ad75e0c61e
MD5 5474c2cbd94cf21ea7d20b27ebe94db8
SHA1 41f7b331b7b84641e3b53df275ad31047b82eb17
SHA512 b50834cbeaf26c9de1d6e348a2f1c84a911ba559df701b9bd021a9ac4777bcc3221259419be54afa457e20c300ecc5f3b213e64c273849592229a73c4c0617d2
SSDEEP 192:11d66Joz1zgCl6mc0djOv5zboAukxVyjR6mm:zd66Joz1zgC1jCbosxVyjct
TLSH
T10CE100A4EA28863FC009027BCDA51F400F79389AD84E7F1935AD75182D5B2DD778E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 7654d1da393b5499500199c4278b526c87a683139bae4f233bd97808d89e7da6
MD5 eb158f47b476fe34a7bfcd0a0d52a2cf
SHA1 56eabc9f7bdfa53b23be2b548be134a4cb84e8ed
SHA512 dcdd0d29bb5b057001dce492f00127091b33953b05bef8b7957abe8eac8e9b8cd9869e5cc52b8bf5806bbc906c270885411fc6209d7ad3a7c20e9b30901f6d0e
SSDEEP 192:BOv5zboBbxVyjJ6mE1d66Joz1zgCl6mc0d:eboBbxVyjk9d66Joz1zgC1j
TLSH
T1CBD10DA4FA28463FC408123BCCA51F400F79385B988E7F1932AD65182D5B2DD778D1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 a669e3445d341cdfa61c3b41c098e970fa933356217b39ca9a5189c602ebc847
MD5 41f84d1ace171b80696f241c427fae62
SHA1 6f9ca90b451d7adecb308978b82bfb4eea7d762e
SHA512 e0059506277628e859d82fd3d3daa04aac3b248c207facace1beeca159904669d64ea426c9acdc9156a49880f447699e7638f8313e2e3821bcf029bfa61d068a
TLSH
T1C461C998F228863FE045423ACC965F411F343456E8AF7F2A35ACA14D1E5B2CD768D17D
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 a6027461ed1fcd6ca657cba022342b27779d3cfa7e9ba0842e3279cb78e42a7d
MD5 f93b59170039dae1c902ce07edbba7bb
SHA1 642fcd6a34248cae4d391fe6192c92b801c866be
SHA512 7ccd6de2160529dd5fdf7e4468ce08df2c4c698f4f9ae359f8d7bfeb5e57110cd9e4cce47f1ee1d57628a52c8c1d53eb8fd337ea6fab9e32e0aee86240b6329e
SSDEEP 192:JOv5zboA/ZxVyjR6mE1d66Joz1zgCl6mc0d:GboSZxVyjc9d66Joz1zgC1j
TLSH
T1CAE10FA4EA28863FC009027BCDA51F400F79389A984E7F1935AD75182D5B2DD778E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 01d47ccab9da4699db692e7ff80a5c5f09cfa772de1147b0f5722c1c86b2386b
MD5 3727c7bf74db6df0b14b2a5c47e8cd6b
SHA1 9b08885590ff6cb81b63c88999682131c01833a0
SHA512 dcfc56a920f2fd4b410b3ed9b7047be64f37f7ed8249b85c1281322b907173f33292c9af301c09a6132d815a6ad7e2c91335e64325bc3248dbf03c019b3c22dd
SSDEEP 192:11d66Joz1zgCl6mc0deOv5zboHbxVyjR6mm:zd66Joz1zgC1jvboHbxVyjct
TLSH
T143D11FA4EA28463FC009123BCDA51F400F79385BD84E7F1936AD65182D5B2DD778E1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\events\events
Size 1KB
SHA256 46e529c4caeb14507c747c5b7b16e2b9c8a57cfbcdae051591994f8a5ab937f1
MD5 8e0d42ef17b74b1279fe39a2aed84a5f
SHA1 d7f51997defa5392dfbd6a73e61a9c20cbf0dc0a
SHA512 759aed0d86160e305b43adf596b83f0fbd8e63826ebc78c6523ae83e4e937c200f12823b88bf5e34be7264c6cec0a27de88c720d2436421b60f1a5a13745bb60
TLSH
T176118C5C3DFA8DA999CBF69C748103CE53158A4A04471D530E22DF8ECDC1ADD32AA43D
MD5 SHA1 SHA512 TLSH

Submit Download

2af61fb2-54dc-4871-b876-9479471f4901

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\pending_pings\2af61fb2-54dc-4871-b876-9479471f4901
Size 235B
SHA256 54d27416223158f85ede8f27bab5e37cee95b4f1713fe54d6cc97499b94a0cc5
MD5 d723b8f21df70fe4ec32242e962b3ca0
SHA1 82ec303ed80cb578437529be7fc9c15dd77e82c9
SHA512 28135930a531078aa42f61d7092f181755c2dbb7d79e8b84f31640258422d61211f536e568466dd3a44896ea5714c394668f5be9bb29a801315170b088191e8d
TLSH
T160D0979228D87BAC08100F13B1E2A9E632A84C332470A860C79100B8AEB9AC40251C17
MD5 SHA1 SHA512 TLSH

Submit Download

5bacb582-3664-46ae-a51d-4779691a9892

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\pending_pings\5bacb582-3664-46ae-a51d-4779691a9892
Size 883B
SHA256 54d74e6f485c95c7e37189f7dae05ad70315f2326c5bbead2355ff3d8fcbf984
MD5 16832baea4b7f1f1a0cac004b16f73d7
SHA1 870e0686f9c6a8106ad184f2821405dbcdf87bfb
SHA512 dd602a0d064782a865ee426f8e364bb4179bed22bdc1d26d1ac3bcca151920dc1296f9940336974284b9a9905e00465403b635a265379df72c0cd2f79ae9d0e6
TLSH
T13A11E3C0A53479B2DD7CD24BC5A537464BF87833C0C999183DB56E140D7E50D53AA64B
MD5 SHA1 SHA512 TLSH

Submit Download

a1e1fa1f-0503-4250-a76e-3f87a753bd83

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\pending_pings\a1e1fa1f-0503-4250-a76e-3f87a753bd83
Size 886B
SHA256 c7ce0698dfd0b5b0d89e79fad0626708a532856cc70263ee54416d1c8639f021
MD5 5e4707e0289d54e0a9cbe0a84a73b6de
SHA1 19ee1b776d238172a0be74e0d17c55e33dfc74e8
SHA512 d175cbfa6d7f54c15acd492571a6fadf095de843c076b8ca445b25a21022d6f5606cefd5c94feba17636ebd74094c29ed27a83d903734311812425cef92e1b7a
TLSH
T13A1100819530B8B2CC78D287C5A0BB424BF47423C0C95C583EA4AB280DAB51D536A707
MD5 SHA1 SHA512 TLSH

Submit Download

aad96f44-cd8b-4e6a-a57e-0505c79d3725

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\pending_pings\aad96f44-cd8b-4e6a-a57e-0505c79d3725
Size 16KB
SHA256 ded11a0083f8451e291f279f10b0b09e7f28fdb3ef2a94149b8768f45429c79c
MD5 558ff645c449eeb97dc51f5f8f090ff3
SHA1 c75b2f837a5f5b718a1ceb1a8aa2ee3bcdb57e63
SHA512 a2a7bf44b75250a1f55bfa95c716320b3a292d589c3d09a91c3e357928a6b762e30b90b79b266749a3d31a34547e5b23c9727dc280a034476f6bdfbe7174ba70
SSDEEP 192:z61LPWuBS7Qxyuem3jVjBZrViipHL5unxqZOUuicBR5UBQFzMRB3z6aA5UwzA:zVuckyub5zW40R5UBoYRB3z6a6zA
TLSH
T1B872D916286055BEC191E36894ECBFC3E6F528CF4C419FCA9BE4BD085DDB06E512B84B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd183a27-7ea5-4d0a-8625-278e7410793c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\pending_pings\bd183a27-7ea5-4d0a-8625-278e7410793c
Size 235B
SHA256 38591c234a11f3d6358493f56689a006c1e827d22db85ade911b36f1a7cf83ef
MD5 394a6b683291594244ba67d6c9b359ca
SHA1 598e0ef95c7e62a6c32fb13e9f95f21b3f1de1b0
SHA512 1d1d12d9660dcd33b7716e6da45ceec6aefb147ed0d8567bea389764b539827683866f9a1b5b852c0c2954af5780845ddc7f8186332a406d6030e80fc0e8e2a1
TLSH
T17AD097802888A75C08201F12B0E83ECA30454C37246498609AA20438EEF9EC942A2906
MD5 SHA1 SHA512 TLSH

Submit Download

e0604f5c-68ab-427b-8ab6-0453a007833f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\datareporting\glean\pending_pings\e0604f5c-68ab-427b-8ab6-0453a007833f
Size 2KB
SHA256 878cb6cf08b0908c94ac353ba78f5f8005c51a27175286974e325c6c83f8e96b
MD5 6b82bce90f9508734d2b651a24abdcc2
SHA1 e39377432890b614cf6282eaca35ecfc03520778
SHA512 60a5f7cfb5ae83705527a85198fd653db7ec865fc125a32d5b18fbf459ae3e4da94ef5c300d3c067efebbdf8f63cfba41fd171aa867bafc49e3c18613a6fcc11
TLSH
T1DE41336CB9B44C778CDBF24D9551338E53648E1340CA2C876D51EF0C8D96A9D23BA52B
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\extension-preferences.json
Size 942B
SHA256 75556cb7ef37fd52a4979f0868544a1336d4ded4de77bb9303aa2fed17930d1a
MD5 3e21ab593e5cf6d2ae8ef31f7dda93f3
SHA1 ea5bf6d1dbba6c135c87bff1f016c92cf1e740a0
SHA512 59a0359371b7f97e477a32f0ea45ae4c526c0115abe43ac305343d97d1d63d076d8dae75606366a486523bcfb54d1fcb20c953c9bef1c71ba3d91a80c688b649
TLSH
T1C211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\extensions.json
Size 14KB
SHA256 d08d3de694b6ac23dfcd854c251d4c89dbd122b7944c6525c96ff96beed0be82
MD5 14c34a5f915f5b0ff44f8bb8bd6271e0
SHA1 b97c07fb0dac61ce3bcff056a7eccfc77a06c150
SHA512 0b20affcf255393208749de1af19fb9f2add3fb465c650168c9011a93185196beb3cc9d17945a1407b352cdf3268ad7a5b91a90895325b35d3b52445371d757f
SSDEEP 384:skkI4v0Umldvj8dhW994z996oPL4HaL4P6vL4HzL4H2L4HC:srI4sRfwXc4v644I4Cz4f4c4i
TLSH
T1FA62431545149EB8298FA78BAA367D02C37D473B70445C78F4DD8FC842FA5B902BB62B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\prefs-1.js
Size 6KB
SHA256 0e45b0751e69f449b33ad105dd9c306a69e569fe8bbe6d3ccb167bf35a6da793
MD5 e9f27674943771e01506dd0b8edc965b
SHA1 0542b87abd850551a46983ce1df4323a45961f75
SHA512 07aebb51c47299286ae352f1a70171604c1fa5d90577cd19d49942bbb259528d42cbd22654d925d0ee9aa0d6e7e3301e80b26f0300042984fc4a1e66122e710a
SSDEEP 96:xHkUTU4qGqHGf35i1zSGSSlkdv9jNnoRHdErMBw88P8L4cn1MR1:OjRmf35iDSSJ9dxBw88L
TLSH
T1DBE13F789408CB7F64B6776CAC6888316AB2013BBABF68D750B55485051CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\prefs.js
Size 6KB
SHA256 23587edb364b84ec1810dc4760889b5552b869d70641d335ddce6d3e99ada38c
MD5 ed65a1d4593e7051b4b4614f22eb54f0
SHA1 2ab7f6c5216513e6abe8b6b5414b9a0dd8493fd4
SHA512 93d7eb29b1e99480e9947805010aeff23fd4e1aab11b377f3f377df68c88c34dd4ec86f34e7db4667594911577fcc23dd90508b3a6cc3d93f7c6e304a6bb738a
SSDEEP 96:xHkUTU4qGqHGf3sT1zSFgOSSlkdv9j3noRHdErMBw88P8L4cn1MR1:OjRmf3sTggOSSP9dxBw88L
TLSH
T1EAE12E789008CB7F64B6776CAC688C316AB2013BBBBF68C750B55484055CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\prefs.js
Size 6KB
SHA256 8a004dec86363a7025d173dc887b7962f442d1c943d305567985234618685aaa
MD5 c985b7972d378e3a47824470fd7e363d
SHA1 1e5611255720c59766a8d6a3b26c6aa43f2edb62
SHA512 54d4c81a448dac24b662ce86ab40dc50d16fda45c9515860ecceb3ebed23a61bc572cfc0be8093e8ab0523ef3c6e5f9fd3d1a50eaa20eab7f0bf1be076fe2ae1
SSDEEP 96:xHkUTU4qGqHGf35iObzSGSSlkdv9jNnoRHdErMBw88P8L4cn1MR1:OjRmf35iESSJ9dxBw88L
TLSH
T12BE13E789408CB7F64B6776CAC6888316AB2013BBABF68D350B55485055CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\prefs.js
Size 6KB
SHA256 3605136cd5e56e27fa118958041993b430ca5032d75e4d5bce8d2f75e6443de8
MD5 53d03e0878416f95b5f2f81a9d9782ab
SHA1 e095067a8c06494a7619c8ae08a20be509cb55d4
SHA512 bb86a79d4289d6b0b5099e2e5e54b69224329628e5ed8c79d0dc33648916bbac24a0ff315d9bb25a72684ffee5ef660bd5dcb900a0e978f95e6daeebb376a71e
SSDEEP 96:xHkUTUTPqGqHGf35iObzSGSSlkdv9jNnoRHdErMBw88P8L4cn1MR1:ODCRmf35iESSJ9dxBw88L
TLSH
T13EE13E789408CB7F64B6776CAC688C316AB2013BBABF68D350B55485055CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\prefs.js
Size 7KB
SHA256 7ef1283baa50a74f843fa9df5cf6fc8a82ddf0504f6381cf84572cffdfd5843f
MD5 72314efae13e796e19a67fcf183b48bc
SHA1 3e5e30466f86defcac9f12ea3859ad599dd05777
SHA512 f74bbed9486128a706ff0bc1ff23266ecfffc8fc0e6766d3c45fc32da58f94c707fda7b017b57c37f17210be7b0a132258229535ba16aa7501c8560100c5bffe
SSDEEP 96:xHktTUTPqGqHGfR5iObzSGSSlkdv9jNnoRWRQ3pErTBw88E2e2w8L4cn1MP1:O2CRmfR5iESSJ8RQ5qBw88q
TLSH
T18FF11E389014CB7F64B6766CAC648D705AB2013BBABF68D750B994C5051CF3842FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 6a8056f7506ab59b17d65b4bd2ff1e788507443664b0068ab756628f624285f7
MD5 a1309739db0de70eacab6edabe244e14
SHA1 633473dac3d6eb8f3743af5d88632bfcd4db6534
SHA512 f666f0ad9864dbff84242f87ebfae758de7ade164bb5c0602a3174935d632c04123618f00834e71b80b07d800e947841ff752aa8436fac7f5c3f8efd787020bc
TLSH
T13F21D3C2DD7E0EF27C56826BC0CA87BBCAAD203509650CF0818ADB0300A928476DE12B
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 45d741463d8e46831a6eaa300884dcce2942e1788b7ab27b7e9944b6e7ca58ee
MD5 dc4b138da3d72d1126d6c1531e48090c
SHA1 60b3df8db8f01481650a43e8f1f2c3141ba3c47c
SHA512 e983cd1e5c1b52f9f3470cd68be6fe90e2fcc019c8a5d1c4f0688925d5f37ed73d4a28853526cff38e12899320f8101e1e81e3aa72de94c768d5280ca8ee2fb6
TLSH
T1EE715DC00F86FCE47649985AC8C90FABC35D2117C6F4D8E501DE0B26487DB65A5EE519
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\qxv393jy.default-release\sessionstore-backups\recovery.jsonlz4
Size 4KB
SHA256 09a654d35af61a013a2adca5cde386899c65a1f76a08a6d41dabc9f3910b4ced
MD5 3a77e394d485c148e3e07d24f21fac49
SHA1 9a9857cf1fe24b21c7517e85ba4f3fdca0196b83
SHA512 5cea770b15a753e98535c8b2a83443f4378be91d6a0ac76fad487fea4a0939e9833e38e1847ae2e1fd71886119e929e44624403e1a4fae589463240ae6d54cd4
SSDEEP 96:GRfhNzFQeiI9Z1Crrykvf0/fzv8nVASwudvXjlfhAh2TY:E/iI9Z1qykvMnzvY8YSj
TLSH
T149918EC29FC69CD456199C6AC4C807BBC74F3027C6F4C8E6458E4721587A50E2ADA629
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download