hxxps://matrixhubs[.]shop/

Resubmissions

24/10/2026, 13:20

261024-qk384sy19r6

24/10/2026, 13:11

261024-qext5sh1216

Analysis

user interaction
yes
max time kernel
198s
max time network
187s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 13:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://matrixhubs.shop/
Sample261024-qext5sh121

Score

6^/10

persistence

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
108	discord.com
109	discord.com
110	discord.com
111	discord.com

Checks processor information in registry 2 TTPs 20 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	5508	firefox.exe
Token: SeDebugPrivilege	5508	firefox.exe
Token: SeDebugPrivilege	5508	firefox.exe
Token: SeDebugPrivilege	5508	firefox.exe
Token: SeDebugPrivilege	5508	firefox.exe

Suspicious use of FindShellTrayWindow 11 IoCs

pid	Process
5508	firefox.exe
5508	firefox.exe
5508	firefox.exe
5508	firefox.exe
5508	firefox.exe
5508	firefox.exe
5508	firefox.exe
5508	firefox.exe
5508	firefox.exe
5508	firefox.exe
5508	firefox.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
5508	firefox.exe
5508	firefox.exe
5508	firefox.exe
5508	firefox.exe
5508	firefox.exe
5508	firefox.exe
5508	firefox.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 6096 wrote to memory of 5508	6096	firefox.exe	86
PID 6096 wrote to memory of 5508	6096	firefox.exe	86
PID 5508 wrote to memory of 6140	5508	firefox.exe	87
PID 5508 wrote to memory of 6140	5508	firefox.exe	87
PID 5508 wrote to memory of 6140	5508	firefox.exe	87
PID 5508 wrote to memory of 4456	5508	firefox.exe	88
PID 5508 wrote to memory of 4456	5508	firefox.exe	88
PID 5508 wrote to memory of 4456	5508	firefox.exe	88
PID 5508 wrote to memory of 4456	5508	firefox.exe	88
PID 5508 wrote to memory of 1880	5508	firefox.exe	89
PID 5508 wrote to memory of 1880	5508	firefox.exe	89
PID 5508 wrote to memory of 1880	5508	firefox.exe	89
PID 5508 wrote to memory of 1880	5508	firefox.exe	89
PID 5508 wrote to memory of 3640	5508	firefox.exe	90
PID 5508 wrote to memory of 3640	5508	firefox.exe	90
PID 5508 wrote to memory of 3640	5508	firefox.exe	90
PID 5508 wrote to memory of 1860	5508	firefox.exe	91
PID 5508 wrote to memory of 1860	5508	firefox.exe	91
PID 5508 wrote to memory of 1860	5508	firefox.exe	91
PID 5508 wrote to memory of 1860	5508	firefox.exe	91
PID 5508 wrote to memory of 5340	5508	firefox.exe	92
PID 5508 wrote to memory of 5340	5508	firefox.exe	92
PID 5508 wrote to memory of 5340	5508	firefox.exe	92
PID 5508 wrote to memory of 5340	5508	firefox.exe	92
PID 5508 wrote to memory of 5820	5508	firefox.exe	93
PID 5508 wrote to memory of 5820	5508	firefox.exe	93
PID 5508 wrote to memory of 5820	5508	firefox.exe	93
PID 5508 wrote to memory of 5820	5508	firefox.exe	93
PID 5508 wrote to memory of 3180	5508	firefox.exe	94
PID 5508 wrote to memory of 3180	5508	firefox.exe	94
PID 5508 wrote to memory of 3180	5508	firefox.exe	94
PID 5508 wrote to memory of 3180	5508	firefox.exe	94
PID 5508 wrote to memory of 4296	5508	firefox.exe	95
PID 5508 wrote to memory of 4296	5508	firefox.exe	95
PID 5508 wrote to memory of 4296	5508	firefox.exe	95
PID 5508 wrote to memory of 4296	5508	firefox.exe	95
PID 5508 wrote to memory of 5844	5508	firefox.exe	107
PID 5508 wrote to memory of 5844	5508	firefox.exe	107
PID 5508 wrote to memory of 5844	5508	firefox.exe	107
PID 5508 wrote to memory of 5844	5508	firefox.exe	107

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://matrixhubs.shop/"
1⤵
- Suspicious use of WriteProcessMemory
PID:6096
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://matrixhubs.shop/
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:5508
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2004 -prefsLen 27099 -prefMapHandle 2008 -prefMapSize 270279 -ipcHandle 2084 -initialChannelId {a17542e6-3778-44c5-a19a-e61392e0498d} -parentPid 5508 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5508" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:6140
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2484 -prefsLen 27135 -prefMapHandle 2488 -prefMapSize 270279 -ipcHandle 2496 -initialChannelId {7c2c6319-97fe-42a4-af25-61be89d87f0c} -parentPid 5508 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5508" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:4456
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3860 -prefsLen 25164 -prefMapHandle 3864 -prefMapSize 270279 -jsInitHandle 3868 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3872 -initialChannelId {3007332d-26eb-49ee-b4ae-91199e0d48c1} -parentPid 5508 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5508" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:1880
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4020 -prefsLen 27276 -prefMapHandle 4024 -prefMapSize 270279 -ipcHandle 4112 -initialChannelId {7e9e576b-94bb-4639-9d61-7c252e6667bf} -parentPid 5508 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5508" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3640
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2968 -prefsLen 34775 -prefMapHandle 2624 -prefMapSize 270279 -jsInitHandle 2768 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4412 -initialChannelId {1f61883a-7015-4cc3-8224-8a26d9d6b608} -parentPid 5508 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5508" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:1860
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5032 -prefsLen 35012 -prefMapHandle 5024 -prefMapSize 270279 -ipcHandle 4928 -initialChannelId {1a3b0c35-7b99-44b6-85db-f3b441788cc9} -parentPid 5508 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5508" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5340
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5256 -prefsLen 32952 -prefMapHandle 5260 -prefMapSize 270279 -jsInitHandle 5264 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5268 -initialChannelId {c448c3a7-4771-4a75-a08f-011962bc6807} -parentPid 5508 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5508" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5820
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5284 -prefsLen 32952 -prefMapHandle 5288 -prefMapSize 270279 -jsInitHandle 5292 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5300 -initialChannelId {e1c14a5c-a56a-4206-8bbc-c457f30f78fe} -parentPid 5508 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5508" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:3180
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5644 -prefsLen 32952 -prefMapHandle 5648 -prefMapSize 270279 -jsInitHandle 5652 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5660 -initialChannelId {36b7a518-ae03-4d50-862d-371bdc1a3f81} -parentPid 5508 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5508" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:4296
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1628 -prefsLen 36926 -prefMapHandle 1476 -prefMapSize 270279 -jsInitHandle 5436 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5252 -initialChannelId {f5ecf68e-77d8-4c64-a07f-09a9a0572aed} -parentPid 5508 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5508" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\activity-stream.contile.json
Size 4KB
SHA256 2b7c0164ef1b1840fb68c1249523f1de971e9a371b0becd3e1dc2b8ee878e071
MD5 3f2d30596530cfb571151d526af39b77
SHA1 f9b0f1fe90a3368fe9f10b2c0597fe2cab037c4f
SHA512 f484eed10702d961c418bd9e91bbe8c8b9ebb37356ef11c33c043523c2f430857c7009868e5a81c9e9996a37d17241ce37db35ad8365593a35d3635c553f50e4
SSDEEP 96:TJwvhMVOPNPmX6erfqkPT+mRKYn4KYfXszFqkh6DToOlz:8McZirfNSmRKYrFNhwTvF
TLSH
T11591A66F816489131731B6D12C8B3BA8F013B40DDAE08968B165DC20817D7EE50EE9C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\activity-stream.discovery_stream.json
Size 74KB
SHA256 5b861c9c0f296d289466c00b13c67317010276634a88bcedf1213ab398cba1af
MD5 29f405c8493a59cb8130a4819afb2b1c
SHA1 1e093e5094d83d2fa6bcffbb62618faf0527f3aa
SHA512 b854ddafc277f59795e4bad80979d8b6763f0a658278e898ced89d6a79b9b714d417ed12d38b708a1d2f4499d27641f94c7e4311d241e435d45d08807b75f64a
SSDEEP 768:CByvJnQsDA4goz2Si+BBDbjMeVCr510ifbK/eWzU+G+DOOr5cMa7rvZaV:CwvJ4ofbIe+OObK/eWhG+rOtaV
TLSH
T180731BA396F8B2FB1B9537C72C0FB95B56E20586F38502C8ECEDC91C81DD654113A6AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

A446C728BCE3284BC33698D3482FDD84237B5AC0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\entries\A446C728BCE3284BC33698D3482FDD84237B5AC0
Size 23KB
SHA256 18beb58e7cf2045064f4285e0cd79ea6b858e1e80cde74b31554772a23dde25b
MD5 98069750c692be5ba55029826c88d7cf
SHA1 8a36401ee6bad5a4775a3f16b0523d0d56ba56eb
SHA512 b1941126bd2d2bfff2930500fa7b4eae082de4c0b54326a03f3af65655461169c097d3732db3068a3b2fb5d56b1acaeb4a1880902718ab16138fa928575763b7
SSDEEP 384:6HE8SvOPK3CA1pgb6lIQ/7WBvu05AiHaPKS17z41eYws1naXkR95FGdV4qFggkaI:6k8WdlIQiBvuoAi6p17z41Nws1naXkRD
TLSH
T196B2C6F308154A5C2F3997C99A1A325CFA33A18DBCCADCE9D1515C1A2948FF3F019E96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E9338C5CCF1E2FCF149487351399F198A4F9FCD6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
Size 16KB
SHA256 9503cdb96ef1f8192a2740aff6d8c8c277d05c4a40f9c6e59d9c90530441d01c
MD5 0748a0b3790bd7a7e2b52cc8a9320829
SHA1 34dd8fbdf2fc41657b083acff6bd591c47924eb8
SHA512 d4aa1f09129599c3aadb0bdef4c4d9fd622c6b7ee37a4c2fd8c54c73abc1b96436ec7226f487cd33389fa47a6e6270c72c7ca975c94914ee4c9481e14e44a5b1
SSDEEP 384:HGNQiO024YOWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAN:mDZYOWTToXJWTTogB7S/AmVAf+hRMI
TLSH
T104729E7D8F013CBC1B5790E9C8B543588D18B7ABDFB5C06D25883D09C988A6AB1F945E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 ce8fd361416246090ce815c0a2aec7645d27718a810328aaf78bb6a5a5ae8c3c
MD5 0abe9df699e9f261922b45231a7e3cd7
SHA1 f4d393189d158dffc1ead40e70c489d1f7b834dc
SHA512 76bdc85df057f74895dda171af305588273b458a50b6b6525ab87048e6ca5d32198e3989c2ebee4f5ba6940109dade2c61a42e174e46bc4ec8c6548e69e3d1f3
SSDEEP 3072:X3lDecvIruo2VVGMgMRuBCxmCsQBdw0Rl:FDVI6V7XRUKj1
TLSH
T19CB3AFF6DBA2CD3C65FFD42CAAC2853EFD262400B3A73019C923675452C6FB86675248
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 ad10e401b256aab47f4348a2cb88668f3321ef2e1bf804638a60f19affe233d7
MD5 262c5de5248050f11cb4590ab7009364
SHA1 534ff3f35e7d869665e4a47a87781d630c5bb46c
SHA512 3425217fd374199080d071c25e3b96a48562381b9a0a6295bce10906b4bbcd30171b6f818db0932beac803cabcca6220905fc04c73c51f39f9b5f8b9ffe4c824
SSDEEP 1536:jTrlin+fp/1BecveOVacrccI2GGo9esKZM3ukVxzbUxfyKKq+psuMlxsqRBIeVnI:j3lDecvcecZkoesEM3uQCxmCsQBdw0R4
TLSH
T131A3AFF6DBA2CD3D65FFD02C9AC2853DFD262404B3A33019C923676452C6FB86679248
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\AlternateServices.bin
Size 6KB
SHA256 e14599683f3a022a6f2ad8f8f7d1e10fe634c693c151ea3d04626936514896d0
MD5 7e0505ca40a4b4773bc3d66fde4511e1
SHA1 353f2e98e00b96590638b8ef254f7d5eabfc7513
SHA512 74bebaa2df3db2654270f51deedc275443f3931ea240ca1046ab4e8d977ee6a92a7198cecd5eb69ad2a15d1b9d884699d220986b211fb162de8629ed683fdd45
SSDEEP 12:jMQphMQSQCadLc9qnc3kELc9l9zlVNc3+/jYXqnc3kOX9Qk0lVNc3+/h1nc3ke1E:QuhMZ/RqQ47zPBiNWPfyOPBgRsP
TLSH
T1DBD1E7F3A3B26A22F1918E78405D7D494CB72206A96401999B9391D714527B3E0FFF28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\AlternateServices.bin
Size 7KB
SHA256 54d69fde2281a7aedafdc3375c29c19a2691a51822fcc022ce0294d8cd269bb4
MD5 0de602d8f37bdef3d529370a3ae72b95
SHA1 0c770876e59264bf7536b17e1534d7a382d8244d
SHA512 dddcf21b17f393b88a9b0d340bf776db7bc4f07499cf5e6187654e982f68f4ed049545d9d9a1e945ab9608167716de151b67762cd3d967ba213b2a870ab05674
SSDEEP 24:7uhMZZTqQ47NmGiNWmJWyemcgRwmF+lzC:zTA7NmxWmom3wmF4C
TLSH
T112F107F3E3F22622F1915E7480597C494CBB110B6A6845984B5391DB15537B7E0FFF24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\addonStartup.json.lz4
Size 4KB
SHA256 47aa2521c4d9430d4974ea06677ff0262609a474f1577b56834394eb5c3d1b7c
MD5 71723ca0f34b2d484e72fc8fa32df134
SHA1 4348dfa0c46700ed8c8d3c9a337a35e716669718
SHA512 a8caf86aaa3cd0bf2b29225f7337fddddaa8d5f34ef7395421515e450dc3e3ccd17a5e2436dea66bc723215f9c833314d26dc8bee19b6db421a036a7cc6450fc
SSDEEP 96:NIVS4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:NGd52xxhD8rGvm6ApwnHUuhN
TLSH
T1E2A18D76D141EFA2FD32C04258D93FB2EAAA9B3410A9C4E4F1AA71154D74E731704340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

broadcast-listeners.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\broadcast-listeners.json
Size 221B
SHA256 db73669a9da6587c95b4dc3e815221b7235efe74a634d75f3cf27a4f9bcadc3a
MD5 6521fbb9c06299ddaee103af8fbb800b
SHA1 432908efee513358b2768f299be6d1f1a34306c1
SHA512 9043b1d9fd64629e2e1c8a63307856720efd1685bb253a3976317095d0b8c9acc26e976934707bcd4d28264f09dbb4b7c4b07ae67c3dee8ef0888ca0edae8e53
TLSH
T1A4D0220E19133C7F8B486629F00827C50B9B21093270943DD3AE61D40A2AAFC4008190
MD5 SHA1 SHA512 TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 75KB
SHA256 9e0d2acc49802251e61ecccacf77f84c5e0469fa963126b4c9ff3cfc172a3947
MD5 8b630dbfa65bb5552ba19d90d67abaf4
SHA1 7182f8916d8bd0d621debaf515aad7084f09cfa4
SHA512 d34ea29f5e63957859ef6e8d52ec115ef349ecbb7802493618784a4742b98a993832e0540d52d77b1f5c023076ac0cb69e98b29418cb3729e803f663cb5bf0ae
SSDEEP 1536:4BznXo1VIJH2n6oCup2JxZ17/hzS2qXDPmGPvv6PfaX9UK:4Bz6VI12sI2JJ5zJ2RH6StB
TLSH
T19C731144EB1A953FD92802BAADD61B103F38F8895A1A2B57375C64383C873DD3D4E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 79KB
SHA256 33f719842a0b822e4ab60ff662da736abf24c08d1f58cc53ddee317770f1757d
MD5 da80001be6eee71dd7890c13ab8f938a
SHA1 838733e05ee86972554594485525dc3a11771648
SHA512 8b30c8129520623321efe7372fc2245cf155b3d7bbedcc3acfea6e1f42c26822c9d186958846887a54c7662cadff110df8de03b6531cc6a285f83f16b93b43cb
SSDEEP 1536:rB8EQo2wHJbMYEPYBECw+IS96MfCbCyBA04pZBSWp/QKfX/:rBvQYHJwHg+CAARfY9PgvfYOv
TLSH
T140833344EB1A953FD92802BAACD217143F38F8895A1A2B57375C64383D873ED3D4E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 52KB
SHA256 e63b932fd56765baf3f6875850a159009cff3229450b65f53a74db02299080fc
MD5 744fc1eda089907034ff5dc6b28221e7
SHA1 dc9e0d59ef852123aed034dce179eeb35774f509
SHA512 403b2e02c47e19ea5e82f50854b8ca443839a386a595c1416bc83471914578fd4da35f21def3a6ca0f4c663c8a196c0abe37648280fbfa0466c15f5bea334048
SSDEEP 768:aEMJ0/qiUyjwXmGcmhucILuPsaKhxlk8HJ8vy60bhbZbUbIbUbrb2bsbzbdGlC3w:1/qiUyjr6UaTBGlC3aPz58WVZb
TLSH
T1CB331444EB1A553FD52802BA9C921B003F78F8899A0A2F67371C65386D872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 80a4aebba1b92d0f151f9684e06b4cf63de94f47fbbd5698b7bbaf2643b31d3a
MD5 fa1b8336d5d480ff7db473300070a14d
SHA1 ea0d60a50e0fe98290587c33d3b7602d2f7c5fbc
SHA512 560651d95878d829b6afb5183ef676196af9f6d12db626238cd8dcb5880173d21afbcaa1ada40968fcdf0a13e92aa5d25569aeadc251dcc679ff61b06dbe9585
SSDEEP 192:dOv5zboP8ZoCyj/M31d66JozGzgCl6mc0dz:SboUZoCyj4d66JozGzgC1jd
TLSH
T1EDE10DA4EA29863FC004037BDCA61F410F39389ADC4E2F29759C711C2D5A2ED769E1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 ee0edaf3858b70bd825541aeeac12815a75c300b6b164d6c9365f46442ff671a
MD5 c7275e49965aaf301a4cb58aeb01b1d3
SHA1 f1615ab85ba5a4f81b089696a7f5b9827e996398
SHA512 09b308f0aa101c0ec40ae3214ea915abfdd7cb14d73ca7419d320b3079a80cf9f5c274fa92be86f0bd6b0ab74a531f16e75e3c468e486f1a40dcecc3c0d54a0b
SSDEEP 192:7Ov5zbo9boCyj/M31d66JozGzgCl6mc0d:kbo9boCyj4d66JozGzgC1j
TLSH
T1DBE11EA4EA29863FC004033BCCA51F410F39389BDC4E3F29759D65182D5A2ED768D1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\events\events
Size 1KB
SHA256 98ac2a63dc91b246f746f06ceece9d29a9a9bc6fffa3c5b9491b0a880c4f4db7
MD5 bffa021486e96f4e2eef5cad23190d0b
SHA1 d1fff8419b9194f9145204780fa635d1e1c34ea4
SHA512 b90b6798f8fc0a9621c90345cb32d8b423f645e18f79915892044791ddace1c2af7c3cd9b489be7d9428de896e26134b5b9bc47cdb4bca382943a2bb8dd0345b
TLSH
T14421675C7DB84D6FACC7F69C7450038E63658E0A158B2D474E02DECDCD81ADA32AA43D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\events\events
Size 2KB
SHA256 b4316e874d46bd60e49718a675aef4086b713d67255a87a7fec585f581a76a15
MD5 a4e2cde16611ca22c8609e98e80e0fb8
SHA1 caeb1826aefd2c05c1f844c5da47214b0ef4b10a
SHA512 5347e5f2d8e3a332330279b76004d9daaf776d14b378d17349d2620d530b494c9f0151a609aa2da009d8673fe73aa848876cdeafdc7705f1ba655d79d85b07f7
TLSH
T19741BB1C6AB94D7E6C87F68CF801028D57954B0694872D874EC3DE8DCC92AAA329F43D
MD5 SHA1 SHA512 TLSH

Submit Download

33734fe7-fc0b-41dd-8469-6e9e34d7f45c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\33734fe7-fc0b-41dd-8469-6e9e34d7f45c
Size 15KB
SHA256 369ef248489e49c5b0ca810b97af940e8b6170e8ac5640d04129fcb494ef4303
MD5 430b45de5c8d6eabb1c6608e463ef95a
SHA1 43889ee2aec7d7fb43bc4afa55d90e4a66bb3f99
SHA512 71b4281c0f0e7abe225dc0d2496200a8d3ed01f163a68c50979f7073e04a32cd78b59bdec1442ccaa11d4e34c99d6f2ec7c00dbf58793ac30d2e8e1f757f869b
SSDEEP 192:RC7P0h48kzjbS64YD05zRM/XUCgWZGB1/KQWy/3RvRxl+Z05iXDBQnzw1bxj:IghhkPbS69D05e+3HxoZ0YXDyn6
TLSH
T1CB72CA562420497AC691E3A994FCBFC3E6F528CF4C419FCA9BE4BD085DDE0AD112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

35afffd6-6a91-43f5-b292-7fb531128f63

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\35afffd6-6a91-43f5-b292-7fb531128f63
Size 883B
SHA256 fa1cd242bce6192f6e4e061604d70b2f7a00f30c1c3f173d6afe5b158650e8cc
MD5 7fe043f56d3668c59d89ecba6face607
SHA1 8bd96a45c98c81562e612282235d843d5e9ed35f
SHA512 a22a484b49d24e9160b9a64ef1c016d9938ec2c1070b22e98a087da9f570c6f7323f45bd9474197b880d51405293bcb4ff5007ea81d81971c8e45981f4fd2c77
TLSH
T1BF114081E131B576DD68834FC1B13B0367F43563C4CA48147DA15A180DBEA1DA37A247
MD5 SHA1 SHA512 TLSH

Submit Download

791d93ec-55de-42d7-aa3c-185bb02e1bd2

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\791d93ec-55de-42d7-aa3c-185bb02e1bd2
Size 235B
SHA256 725a8613a9f340f7c09829683ed86b9e9d304adda19071d14b3082f3635b1169
MD5 f8a84f7eadaa98440bfe7a2bb2036ac7
SHA1 5805e28bf51a153f40a3e50ac717238b9b939469
SHA512 74d4b4226cef54dc4e5fdf34c672babc415614dc85bd000f684a2cb2bad4af85575a5d9b9cff74e2490253708c0170371b057389e78d6fc8871fac1281f9f257
TLSH
T1E8D0978028D8676D1C280F07F0E069D631488C33247468A0C6618078DAFEAC8022182A
MD5 SHA1 SHA512 TLSH

Submit Download

7950a258-9134-4449-9354-1193ad020a41

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\7950a258-9134-4449-9354-1193ad020a41
Size 280B
SHA256 37f60c869854895c4fbfce4b47521ca05da6db77a2078909960b28a82f57a8db
MD5 9e32cc306c4be291681c216fb18b7104
SHA1 d00be9f00df8a32877cdf0aca0ea3301139c5d9a
SHA512 c2627c3d2af6a441afe6ab7f30365222a24b45a9dbd70e4c2f652f2e85ba0ce9c02f2d9c513163abd975dba84334e0c58af2223d686dd39d9d6689fdc466ba40
TLSH
T103D02BD06898239D0CA84F6FB0B039E275B54C3364E46800D5924674AAFFEDF415A80A
MD5 SHA1 SHA512 TLSH

Submit Download

80e5fc0c-ad53-44fa-8c2c-010412c09afc

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\80e5fc0c-ad53-44fa-8c2c-010412c09afc
Size 2KB
SHA256 7db7ebbacf084faa5dc9ea4c34caf1c91642c091943ec9dea270ef3ac7c534da
MD5 dbe2186d933b7ffb88ed9d76b955dc73
SHA1 457f51303fbf8ef8b65cb004c34ee1e3d0c384f1
SHA512 cbd22cb6743e44a006486286d3049ae20c4553f02cf5a11340aad9a4503cc774e950aa1ca6e083de1d4bb9d1232d9ad18506ac3aea73f74ec52d01e921f6872b
TLSH
T1EB41236835B44D36ACDBF24D9191234F53748A8340CA2C836E91DF4C8DA6669337F466
MD5 SHA1 SHA512 TLSH

Submit Download

b3819082-5a33-415d-b4ed-23390bb4d758

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\b3819082-5a33-415d-b4ed-23390bb4d758
Size 931B
SHA256 e5cc311f4454add4348a54cb7f557d1fe26c148a5bc6fa9256b7422ae1730907
MD5 4a6c0a36362d780c7948f07e706ca2a0
SHA1 b2a63bdb9745187d218b63b7cdd8a8de4df6e9b0
SHA512 72fa61c3531fb5d76080baa71de4bda195a6e5d877386944f0c2b1978b23366965a9cef916d255b75904c3e6116a87dc7498199895781230394d0e1592d5f4f3
TLSH
T1E61110808521B572CD69D24BD1F17B036BF434B3C0CA09187DA06B180DED63DA3AA24A
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\extension-preferences.json
Size 942B
SHA256 2f56e841373edc1cb41d946163df4cab5ce7d5cfc8b8816115628c35031f5656
MD5 ba1f2874a20e86779a35b437c0d6d065
SHA1 f232cb2597cf5ec4477d9ac0bfa43c756c7c77b7
SHA512 18023b5ccd5838aaa9e3614bc62ec83060304e112ec36184c464cded6e8bfcc98d3efab57ea8c3fa9653052e61bef92784764b6c184b7a61987bce3be1b46057
TLSH
T14711F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\extensions.json
Size 14KB
SHA256 701addd9ae4f25abbfc748274a89f5f30320706cd4eb2c8a73955735e38d7e53
MD5 73cbe49dad4b470645a2a3fcf85b5310
SHA1 09f7410b334ed84caeb5e5af710da2e0f3bc445c
SHA512 30ec0878882fde9075a55cb0ecfeb604f1bd772c87f0eac2d92c30342b128657f76b0928cc6ccf634fc693459ca3d00c32e8ec420910d45bae163ef5bd06109d
SSDEEP 384:qxkI4vmUmldvb8dhWq94zQ96oaL4HAL4PrL4H8L4HbL4HC:qCI4eRfIXn4o6X4C4f424n4i
TLSH
T1B562421545049EB8294EA78BAA367E01C37D473B70845C78F4DD8FC842FB5B902BB66B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs-1.js
Size 12KB
SHA256 67fecb66b338b168027b50720b2362838e6dfb81a238dcaae577f39d108901af
MD5 030c683192c8fe47cf1555d7743fd1ee
SHA1 be5dfea4ffe145a349b0336c523d3e707c132842
SHA512 bdf8b60aded1808464c7fa01366a974ea7825c12b13809a46ecc324644d73da1dd00e68fc10341184d259aee9cbb32faa8a79a0c7126fee5919123c32adbd17d
SSDEEP 192:ofREfkEPEhSS6XLRkATWMOBw883uiWvUHK:lZRkAAwuwq
TLSH
T1FB42CC385445CB3F24B6327DBC21997059A10227BABFBCD246FC94C2485CF6541EBAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs-1.js
Size 6KB
SHA256 1bbd64f9c1afc0238255e4feeab23fcc84017d486ec94be850086b4689342682
MD5 91fae6946e3a4ab9feeaed2386fe3870
SHA1 bb3213f973b48da89790c9d23121cd08441c3747
SHA512 ee365930435277a67a4b73045b6b444dfa202df6f8c4e0851475997945e9957614341d2e7cc2e550c5c057c0d8303c1fb104c200609f881a33c2e92525ff52b0
SSDEEP 96:xHlwUTUnqGqEfxEPObzSehSSlSdv9jjnHRHZlejyiBw88n8L4cnihK:0aREfxEPEhSS69ZTiBw88k
TLSH
T111E130789408CB7F75B6366CAC688931AAB2013B7BBF68C750B554C4055CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs-1.js
Size 7KB
SHA256 4182590faee09b0000af4afc5c006bf8e55b9753f98141c3defbba87bbad235b
MD5 c33df2827244b3102b9bda4d11550fb4
SHA1 8c702b69abc31e40f5b0a0d5569b30d23bd2abb2
SHA512 1142a3310a10f6eea005ad08eb44106c72b1ca1f91e5eb0e079f98289a730f58c99b7ba07c238d975b337c442095f2be61723c02278d12768e3088d388fb263e
SSDEEP 96:xHlwBTUnqGqEfkEPObzSehSSlSdv9jjnHRWRkiFlejyWnBw88+8L4cni5K:0fREfkEPEhSS68RkATWnBw88l
TLSH
T101F120789404CB7F74B676ACAC2489305AB2013BBABF68D751B954C4051CF3446FEAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs-1.js
Size 6KB
SHA256 19a6dad17920695484e5a1db015cbdd8b44e21f53c277afd1825b4d96f198156
MD5 5703e10c326b555f5c35962ebc844c1a
SHA1 4bf6d1ac5bab786560186803d402080ea85cac2d
SHA512 c561a44bc8220b29b6cae8ef62cae8039f7dfd7e4d0a70d90c74b2dd7aa0816bdf438a2f10188bf6146e086a588be9508947b2978f3b810f1d636949a35e4d5d
SSDEEP 96:xHlwUTUnqGqEfxEP1zSehSSlSdv9jjnHRHZlejyiBw88n8L4cnihK:0aREfxEPjhSS69ZTiBw88k
TLSH
T19AE13F789408CB7F74B676AC6C688931AAB2013B7BBF68C750B554C4055CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js
Size 6KB
SHA256 06070eea39dd6f02ea6e0d2accee886ea942f6892fe45a54dbbccd8147cff90b
MD5 dd2df5eaacee9262dd2c3c163ebcaa26
SHA1 77fc94075aded66ff274358d631377acf1ab5e21
SHA512 9f464aad11411eb43f6d380147a9a1695a7c2270af8abeb2d12bfcb346bc94c8ad607e5d42065a64ca751d39fde336ab2c2a6567c6a214395f6c5a4cb0837ba7
SSDEEP 96:xHlwUTUnqGqEfxVQ1zSpSSlSdv9jbRSnHRHZlejyiBw88n8L4cnihK:0aREfxVQASSgs9ZTiBw88k
TLSH
T1E8E12F7894088B6F74B6776CAC6889316AB2023BBBBF68D750B554C4051CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionstore-backups\recovery.jsonlz4
Size 25KB
SHA256 1c1fd668c4b7560203038c6197570c66fc6af2c9b14464cda7dd08d9850e5886
MD5 a4f05138014c7ade5fec44301f019260
SHA1 c84d59dc15afc6db03a6eea4dd7cf85ea9837109
SHA512 050d4ad0f8492eb472ce96411127733f16a73e5a36f8069bf407ede6e8ec777bcb6780ceb696a9a0ca9dcd8d3628a63a630940ec653e7258ca874ca81cda5145
SSDEEP 768:CZAWaYYri08nabrh0tST0gSPhioE5YL37:TYt08abrrSIv5YL37
TLSH
T1F6C2BF13C8F15FC9B1B6431652C9AE7FBD7749101AFA5808AB65BF5894AA388E31803C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionstore-backups\recovery.jsonlz4
Size 76KB
SHA256 dda9152c8f7fb508d3f9538e5ab43079283c186f0cb76e28220e8f626a95a482
MD5 cf8c8d29f5b743a54ba9d1fb38d1d02c
SHA1 abd1959a11dfbcee60c850fff350118d420ecdd8
SHA512 203e994226f175500822f2678dc3f1c1bc29316c2bcf4212091c91f9732b6a5f8b2124a70f3526870ba120da334df1cb18025945e908764dd4c21386b6a31be7
SSDEEP 1536:Bvw1kNW1Bb0+kXPXr9+ODh5rI2z29IoBxNu7W8NETxUdw1on:BY1G6bY/Xr0ODrTivY7WaZdCon
TLSH
T10E73F1A0EC3EAD7B21D9CF0229A69F2C95249E2F86F94543924C37F06B79503085F95F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionstore-backups\recovery.jsonlz4
Size 76KB
SHA256 27ddc0ac79bb9cedec4f94aff34fb6e1c94444d81f8e1714e16e6c9505d7dd69
MD5 044ab8bbf322e6fccc7d0b11f2c1e058
SHA1 bd651b5d709fd3d2c43d3280ef0c5e33b276c2b4
SHA512 ebf2ad17795cc7ea339b2b3a2d1788d48ef318a97f8cfaaca3f8fb020e84c32a4235d744ab35ceacc43db8f8b90c06a511372c3c106d69cbdd51c4d1cd66c550
SSDEEP 1536:Tvw1kNW1Bb0+kXPXr9+ODh5rI2z29IoBxNu7W8NETxUdw1B:TY1G6bY/Xr0ODrTivY7WaZdCB
TLSH
T1C573F1A0EC3EAD7B21D9CF0229A69F2C95249E2F86F94543924C37F02B79503085F95F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download