2057715b840f6c5e615d4cd4b8698c826053af92beb8a31b1536dba3f0fb8426

Analysis

user interaction
yes
max time kernel
396s
max time network
391s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-de
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 17:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 57KB
Sample261024-vrexbabs2x
SHA256 2057715b840f6c5e615d4cd4b8698c826053af92beb8a31b1536dba3f0fb8426
MD5 76b0390598ea2ff37ed466f1762e8ef1
SHA1 0681ace3e8e9e2f6ac1cb294d172ea886c6bfd97
SHA512 245c82d12f935102d5d7554fc73a3701afcf9eef41856b880c4a98ef045460d7be24795f48944a87d61abc21e7425a94c911e27604945153dcbd36df910a7bb6
SSDEEP 768:2M5Fojxe7vioZVOWsqESWmlYIeMmihkGjbo:b5y4L9BWmlYXMmihm
TLSH
T1EA43C73922F3157A119386B2B7D2AF1BAEA9D307C55BDA9A319C47801FC7CD18D63314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

persistence

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	discord.com
9	discord.com
13	discord.com
22	discord.com

Checks processor information in registry 2 TTPs 19 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	firefox.exe

Suspicious use of AdjustPrivilegeToken 7 IoCs

description	pid	Process
Token: SeDebugPrivilege	4372	firefox.exe
Token: SeDebugPrivilege	4372	firefox.exe
Token: SeDebugPrivilege	4372	firefox.exe
Token: SeDebugPrivilege	4372	firefox.exe
Token: SeDebugPrivilege	4372	firefox.exe
Token: SeDebugPrivilege	4372	firefox.exe
Token: SeDebugPrivilege	4372	firefox.exe

Suspicious use of FindShellTrayWindow 7 IoCs

pid	Process
4372	firefox.exe
4372	firefox.exe
4372	firefox.exe
4372	firefox.exe
4372	firefox.exe
4372	firefox.exe
4372	firefox.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4372	firefox.exe
4372	firefox.exe
4372	firefox.exe
4372	firefox.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4784 wrote to memory of 4372	4784	firefox.exe	88
PID 4784 wrote to memory of 4372	4784	firefox.exe	88
PID 4372 wrote to memory of 4528	4372	firefox.exe	90
PID 4372 wrote to memory of 4528	4372	firefox.exe	90
PID 4372 wrote to memory of 4528	4372	firefox.exe	90
PID 4372 wrote to memory of 4780	4372	firefox.exe	91
PID 4372 wrote to memory of 4780	4372	firefox.exe	91
PID 4372 wrote to memory of 4780	4372	firefox.exe	91
PID 4372 wrote to memory of 4780	4372	firefox.exe	91
PID 4372 wrote to memory of 4928	4372	firefox.exe	92
PID 4372 wrote to memory of 4928	4372	firefox.exe	92
PID 4372 wrote to memory of 4928	4372	firefox.exe	92
PID 4372 wrote to memory of 4928	4372	firefox.exe	92
PID 4372 wrote to memory of 5268	4372	firefox.exe	93
PID 4372 wrote to memory of 5268	4372	firefox.exe	93
PID 4372 wrote to memory of 5268	4372	firefox.exe	93
PID 4372 wrote to memory of 1020	4372	firefox.exe	94
PID 4372 wrote to memory of 1020	4372	firefox.exe	94
PID 4372 wrote to memory of 1020	4372	firefox.exe	94
PID 4372 wrote to memory of 1020	4372	firefox.exe	94
PID 4372 wrote to memory of 6052	4372	firefox.exe	95
PID 4372 wrote to memory of 6052	4372	firefox.exe	95
PID 4372 wrote to memory of 6052	4372	firefox.exe	95
PID 4372 wrote to memory of 6052	4372	firefox.exe	95
PID 4372 wrote to memory of 4576	4372	firefox.exe	96
PID 4372 wrote to memory of 4576	4372	firefox.exe	96
PID 4372 wrote to memory of 4576	4372	firefox.exe	96
PID 4372 wrote to memory of 4576	4372	firefox.exe	96
PID 4372 wrote to memory of 5140	4372	firefox.exe	97
PID 4372 wrote to memory of 5140	4372	firefox.exe	97
PID 4372 wrote to memory of 5140	4372	firefox.exe	97
PID 4372 wrote to memory of 5140	4372	firefox.exe	97
PID 4372 wrote to memory of 6092	4372	firefox.exe	98
PID 4372 wrote to memory of 6092	4372	firefox.exe	98
PID 4372 wrote to memory of 6092	4372	firefox.exe	98
PID 4372 wrote to memory of 6092	4372	firefox.exe	98

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\AppData\Local\Temp\sample.html"
1⤵
- Suspicious use of WriteProcessMemory
PID:4784
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\AppData\Local\Temp\sample.html
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4372
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1952 -prefsLen 27097 -prefMapHandle 1956 -prefMapSize 270279 -ipcHandle 2040 -initialChannelId {cbcf76bd-9036-45a7-9691-dd3428bb55fc} -parentPid 4372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4372" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4528
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2420 -prefsLen 27133 -prefMapHandle 2424 -prefMapSize 270279 -ipcHandle 2432 -initialChannelId {76c8a38b-088f-463e-8d21-20772a3d4f49} -parentPid 4372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:4780
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3836 -prefsLen 27274 -prefMapHandle 3840 -prefMapSize 270279 -jsInitHandle 3844 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3852 -initialChannelId {5779ca3d-58f7-4131-901b-a63278e40319} -parentPid 4372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4928
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4004 -prefsLen 27274 -prefMapHandle 4008 -prefMapSize 270279 -ipcHandle 4088 -initialChannelId {697f8a0d-5cba-49f3-a220-efea03224f0f} -parentPid 4372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4372" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:5268
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2828 -prefsLen 34773 -prefMapHandle 2972 -prefMapSize 270279 -jsInitHandle 2832 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4540 -initialChannelId {cf741d82-60c0-4a56-993f-3344c8a1faba} -parentPid 4372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:1020
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5212 -prefsLen 35010 -prefMapHandle 5216 -prefMapSize 270279 -ipcHandle 5196 -initialChannelId {e8204ba3-8db8-4b43-af8a-ec5f77bf9954} -parentPid 4372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:6052
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2692 -prefsLen 32952 -prefMapHandle 2704 -prefMapSize 270279 -jsInitHandle 2708 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5576 -initialChannelId {580574e5-49ee-47de-98a3-ef7e86117dc3} -parentPid 4372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:4576
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1588 -prefsLen 32952 -prefMapHandle 5556 -prefMapSize 270279 -jsInitHandle 5560 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4820 -initialChannelId {08e30497-d608-4e09-8b6a-4d62c1241ff1} -parentPid 4372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5140
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5828 -prefsLen 32952 -prefMapHandle 5832 -prefMapSize 270279 -jsInitHandle 5836 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5844 -initialChannelId {4e0aba1d-7cfd-4d32-9293-7547ce0572cb} -parentPid 4372 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4372" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:6092

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3176

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\activity-stream.contile.json
Size 4KB
SHA256 222963b1448d39428fc1cf4cf08fa3aee7deb9483e9642e975025aec818659c3
MD5 0c51cd1026be5fd3231045f5e9c761d8
SHA1 8fa98f3d0cf22e71e920effa1cf76415b5fb1016
SHA512 030d43617f85aa6e147ace6aa2600b183ae1ee6f40113f4764bfc2b3a9c2b953f46b080c9d49e9045c66c74a76dec13ffac29146dbbabcabdbcd729343ec0260
SSDEEP 48:YdbAIreDZlywWMZwpqQHioPQamqp4JyreDZ7ywN1d3QPGjy6T+jiR1QnnqbtreDu:TvaMigamPx7jT+mRmnnNyJW0Uolz
TLSH
T15F91C76F846445221A78F7E97C1B27A8F007B0059EE5DFAC716B8C11857CBEDC0DE984
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 312e122969935524d525927762b5d4811fa26032b4206775f2362b1699b3526d
MD5 63bc35bff78f94d882662d1efc6435a7
SHA1 6122359c1068143ebb5285f80293d01315fb06c8
SHA512 34acd5e4bfd0acae7ad64a8bd2d61902d943650bc7ea93e885ac2f70d07cee548a12b69f3b9aa64de0cc058f98ea6464837c1a3c80a8603778049b3848dea3ba
SSDEEP 768:4yZhbeGYxNrOOufXpQMYVV5+3M51iH/Ls2xiyqA721OOrvZP:D3beVpOZKVvuE0H/3xPq42Np
TLSH
T18673FBE3A6E871FB0BA137C72C0B796762E10185F34505C8FCEDCD2C91DE695123A6A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E9338C5CCF1E2FCF149487351399F198A4F9FCD6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
Size 16KB
SHA256 eabaa2eb479a2035445d446ad051a3c252263078f18441adedf17aa8c3d867fd
MD5 ec36812d9d06905c7b18dc0e0312f13b
SHA1 ce7c8cc95003516b03829a05ef3e8cf484034074
SHA512 7e2f9e372a47249f63a02bd6dd516a00c10777e915ef0c131d4f64b02d9994bd514f07944d7d78887703ed8bb4be133a702b6752a30376c1429bf9c6a65c07b4
SSDEEP 384:HGNQiO024YtWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAj:mDZYtWTToXJWTTogB7S/AmVAf+hRMe
TLSH
T11D728E7D8F013CBC1B5790E9C8B543558D18B7ABDFB5C06D25C83D09C988A1AB1F945E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\startupCache\webext.sc.lz4
Size 106KB
SHA256 76307f643d2f2ce5615a71424d89287552e3c480abbc90155ad1de9025302807
MD5 f2a5737142ab1873789016db86a02948
SHA1 f66d2f805254fc210ee0538acc171ad2a214a2d5
SHA512 3fa2561765d499b542f7e6df284836d7d61f6ddaa8d47feaa3cef8d0378f5e934a42e8100f4a93e10f17c3043e7365bc0739cad1585c6c86528a1b9a22590dc7
SSDEEP 3072:X3lThKy5FsDW7ZxxRyhvWJ5mtg2aM8G+1cvK1AbbSG1:FN/oSZxqCYotG+1EK1cR
TLSH
T110B3B0F6DFE2C96D55FFD42CAA82843EFC266404B3A73009C823771461C6FB86279648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 b9a2540ab53696fcf39fe89a01a959486adff025290c640d8afdfd437819f729
MD5 c805adfd0c67e7eecdd3d2361e2f227c
SHA1 3f14bc02d2fc60665a4978b997948508928391fd
SHA512 c5f1866c0c88a9db045f9b2e8defe62c124998fc50c1a5f837d2f49dc8d5f37b8e5fae5953c31caf5f139515179346da5b3f92875b18ff96a8c64562dc2f88e4
SSDEEP 3072:j3lThKy5m7WTXcyhLWJ5mtg2aM8G+1cvK1AbbSe1:pNQWTRmYotG+1EK1cn1
TLSH
T1F4B3BFF6DBE2C97D55FFD82CAA82853EF8262404B3673008D923771561C6FB86379648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 7KB
SHA256 a5b63135047810f9b0e669c565222a563b8f1073c106a59cf481984c7c4b0eac
MD5 61e35df71cb884be64a25967aa7f1ecc
SHA1 4cc13bfaaac86be5f418d54bb2a3a0d3e7c655dd
SHA512 20e9da06770bc3fb80d490703ae998cf1f151f1814463ae6b1d138f48511193ad1cf7360ade5e29fec7907ac9f0914cb1fc9ca1f3cf27552051381301023d3f2
SSDEEP 48:ZyCdfJ5Ugdw6dzCvCdfJ/6Bdw6bCBCdfJ/adw6JDWQCdfJspi+plRgdw6W5o:z/7/S7/Cws8SAWS
TLSH
T114F1D0010BF70E95F5F3953176323B039277FE016A5A466EC182719949327609DBDF93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\addonStartup.json.lz4
Size 4KB
SHA256 f814bc6137169fe0f9e8b57002e7f05a39f11005eef5550a476fb842b16aa236
MD5 537b1e900d2dd323a61b2ced42da3533
SHA1 cecc7c815041d6917b63d5c81844786b7bfd54a0
SHA512 a205219299c09bf4da680df601d30e9299ab8959d38ae82d62268ab59e118a6ec5b1a3f764947809e302723886986513aa57738a9b16210f36946ac5b6dcd07d
SSDEEP 96:NFd4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:Ne52xxhD8rGvm6ApwnHUuhN
TLSH
T18EA17CBAD141EFA1FE32C04248D93FB2EA969B7410A9C4D0F1AA71294D74A731700340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

broadcast-listeners.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\broadcast-listeners.json
Size 221B
SHA256 c1fe51cf3cdeecfdaa31db4a3d3ca43085bb1db9e563a48b5e3c6228dc8527a7
MD5 2948a47f4dc6ab74fc8b6e6d72e43c34
SHA1 dccfb9f1cf9b3be3526432bd0155230b858ed3f7
SHA512 81d23d8ede7f633d06f681d9a8021278f0470ffa0a911fa4bdefe679fd293410432ad918c31d5a051372b7cac239f7d5a7e0fb9e6ea8fe57466ca9d3a8d8b04e
TLSH
T1A3D0220F58177CBF4F486629F004A7814BAA200D32B0A43DC3BE30940A6EAEC8108190
MD5 SHA1 SHA512 TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.bin
Size 50KB
SHA256 cd0ba5ccb2c93f534c2570346c8fe9f8cff6386fe8365febec8566635b881566
MD5 9967a5c8909821576fedba150da4bacc
SHA1 7a2e8c1de605ec567c5677ba53759b91de73ab84
SHA512 cbf662b0cae43a281284cb45de12d1cc0c1dfcb9371ad9389b011dbcf1c7668cf43dd9e5e4b2508ea823266588c59bff46af34bdec95c04b9d606770b2dd6858
SSDEEP 768:NcCn8hVrLJasLDGcm+ucBD7i4sVKAbvRWnwm3irUbbbIbzbubPbLbpb4b7D0REED:NcCn8hVrLJLND7bsVJD0REvTOoB54Tb
TLSH
T143331144EB1A553FD46803BA9CE61B003F78F8899A1A2F67365C64382D873DC3D5E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.bin
Size 31KB
SHA256 d3f2d41a40bbe45daa7bf224bafb1250c0a4c33b6d3a6ca0005e27461a506feb
MD5 b69597388e2f3db2211c93ff07ee1285
SHA1 c7f89a35aeb592e50c2dcd3828bfd294454fbd7d
SHA512 9910440f6ed61b77efab40b51e6f0b609b5ca451100ab2d21035696c9353a9e1d1680d269a6533f025c38c7ebf29dd4c356e9a9d099218dedb7a0d0ed9ae8a6d
SSDEEP 768:VEoqH1pcCVR7sJDGcm+ucIhTKdHrLNb/b6:ZgcCVRwiTv
TLSH
T1ABE22284EB2A953FD41512BBDCE61B002F79B88A59192F573A4C606C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 03b9e0dfc01d8ce5934861a56ee921ddc0a2dcca7be12325d227ca820a6e1acb
MD5 1a01fe9ab6869e08cfb2690c6856aacf
SHA1 3fd28b0d8f8b716bc62e7df4f90d7110335bdd17
SHA512 2a1d22322471e6dd05df5faa25e438aa98b69d2e7f987663553887e74a7b9d0821994c093b4311efe278b8f85d0f600fb66b5adcdedb14bc59d6420b2449b651
SSDEEP 192:UOv5zbo7vZbtyjr6mV+rc1d66JoztdzgCl6mc0dz:3bojZbtyjGUqGd66Joz/zgC1jd
TLSH
T12EE10CA4E628863FC418437BCCA21B410F35389AD85E7F1935AC71192D5A2DE778E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.tmp
Size 50KB
SHA256 48050da2140cfeeff85acd7e0ba3650ff71287a4344ba0c42cae3751f0e3578b
MD5 dcaa501ff055d1340d5d40f5368c26ef
SHA1 56c854719ab03fc9fdcf202b130dd598ac3acb2f
SHA512 f9483431749f9623aba0bd70ecfa6f48153fe3d176ac5835923313971e40c3c09d6a314c6ce5d72b5a069c1f351460d521898e3ccd9ef5f5258f2907503f73a8
SSDEEP 768:ZtH1oEccCn8hVrLJasLDGcm+ucBD7i4sVKAbvRWnwm3irUbbbIbzbubPbLbpb4b3:ZMcCn8hVrLJLND7bsVJD0REvTOoB54E
TLSH
T10B331144EB1A553FD46803BA9CE61B003F78F8899A1A2F67365C64382D873DC3D5E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 538c1a3794f88a77bd68022404e76dcedf67a4033befd01ea2c3ed1cbe37d877
MD5 a48477d4fea5d9e88372f23c069848b1
SHA1 9e060948ad8fed87381e36c07938185505229d07
SHA512 9d2215b0a8be3345b6596846ea94ad86f560c04421b4fbf0018b824ae24ccb61e699837a107e651115747da5d88c864481f95f771120a8d8ac2f664086f7948a
SSDEEP 192:Z+rc1d66JoztdzgCl6mc0dbOv5zbo7Hbtyjr6m:ZqGd66Joz/zgC1jybozbtyjG
TLSH
T13EE10CA4E628863FC419437BCCA21B410F35389AD84E3F1935AC71192D5B2DE778E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 700ae00d3de94a089615db684dd73df9f81bbbacb3f102df26741a1a6e3ffc32
MD5 dec1664d28e2b3659abf3615e4a4f70b
SHA1 999ed98395d020b4404e090234b2b96a334e580c
SHA512 2a105d8652be1c511580c0645daff1211e5c6ef227a92a4d603d04485c01c628013173a0a5a305cfce2de350a154050c8875540c2bc2ee290834f93f70d3b9af
SSDEEP 192:S+rc1d66JoztdzgCl6mc0dbOv5zbo7Hbtyjr6mm:SqGd66Joz/zgC1jybozbtyjGt
TLSH
T1E2E1FCA4E628863FC419437BCCA21B410F35389AD84E7F1935AC71192D5B2DD778E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\events\events
Size 1KB
SHA256 c6e00988b917cdf93625310c24d95c305fc7352b6b4f8c01876853bc417364f3
MD5 ee3dc5299e7bbbcbde7daa1b0db44369
SHA1 5dda8ec4c6d98f80231af3017ef3aa680107d962
SHA512 08d2fa87060fffcd387a95abb9a2917eff984a62c70122a8318b7ab905e6a2495c0a1c2b369d397ff34ac1e042d767fbb1173a64598bb6824d838b5546d3d9e9
TLSH
T1E421305C3DB84D6AA8C6F65C744111CE53954E0A068B5D830E42DFCECE82AD9316E43D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\events\events
Size 2KB
SHA256 7493b0d0ade69e46b49fafee6248de4686914172d33a2d485e8d6df3ce824500
MD5 5398252bbd2e9b1cb9f9fda80fa084ee
SHA1 bdafd8e497195909b1160bb260e4c4946819bf0b
SHA512 be1d33f889b04167899ec2fc03e00fbac100d5e92b22b097e2eecc94641c795895351f3c5dcc68a9f01d0bbeda4f9ae85d742dc617b49d6e892a1fe95afc9155
TLSH
T13B41AA1C2EAE8D7A6887F68CF801058E93854A0755C72D875EC2DE89CD43A99329F43D
MD5 SHA1 SHA512 TLSH

Submit Download

43c0b1c9-f055-4c28-9104-a523d15c1cbf

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\43c0b1c9-f055-4c28-9104-a523d15c1cbf
Size 4KB
SHA256 0c6ef8eec2450a433ad6b1e3d84e717f5e7edbc1a99eca44e1320eb79a4d00e7
MD5 6e161d17466324cf021b32f6e35fea57
SHA1 cf05443119ed2ffd7be2c52fc8f6f308baf79c57
SHA512 2b65fc9b037c42605f4092dadc6cf59f2a2633ae36c4768b6da53b6ffef28096dc3e3a00e0305c77217327b502c90bacdd7cb479c2889ff86683626f51a084a2
SSDEEP 48:HU//NF/iWmqJlycZbV2qA7QcK3woSqaxHVHSZTAaCOa3bXp:GNFaWlBpMQSoSqaxHVHrRt
TLSH
T12E812E182A7DACBAAC8BF69DE442028943D0474390C61CC72ED6DE4C8D5765A329F52F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4fcf32dc-76d7-44c0-8257-5345e8f51d72

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\4fcf32dc-76d7-44c0-8257-5345e8f51d72
Size 235B
SHA256 a1d07af2d21309f481e080f190026cac3321e6465bb4673c42825cc54688c9df
MD5 1ca18b0ad97028bdee77c41f4b15990c
SHA1 9b637a94a9d15738605ad315f8a13bc2ef2f9137
SHA512 a9668a288af87193d032bab7f69ff4bc9a4b653758dd867f78c9b0ddcbc62f947874579a98aa409f6b1ecfea2e3c6b753342027d3db71ce583e820c687f18cd3
TLSH
T1D5D097851888672C08100F03F0B0ACC230854C3314B5A860F66109389EBAECA4152C2B
MD5 SHA1 SHA512 TLSH

Submit Download

5007eae3-ede4-4b0e-9472-93c36d1f514d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\5007eae3-ede4-4b0e-9472-93c36d1f514d
Size 883B
SHA256 91e29d735e51e7cd9558b8f3f7f052911824336312fa17fb0d620d5c366e01b2
MD5 c34ce8d18190da2b56fd96839f04773a
SHA1 f6c48e003c8472fb6d63cff42667eb267713f98d
SHA512 6b1e5f9e1b3b7de8b914da9d465a22105469742fdc6bfddd7de141d9d8a7bd36cd900eb5dcbc5adb96d863d63c60ee009e2ece7a73286e784cbc492babe96aa9
TLSH
T10A11C051E235BA72CC7CD25B89927B4247F47023C0CA89143EF49F144D7A61E936660B
MD5 SHA1 SHA512 TLSH

Submit Download

502a4e3c-6ab7-4916-884a-d34c9e39d3e4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\502a4e3c-6ab7-4916-884a-d34c9e39d3e4
Size 235B
SHA256 d98a30eac6eadb34d55cce2f4c12bf2a2ba22f88b02dedb7cdb6bd0d69ff067d
MD5 4eed1b4c1aa2858f82ed7dd45575f47d
SHA1 26d876be114c2876883c8e97bdf41579f3aacca9
SHA512 e9d5fd33c324df2adc9c3a7b756662840d5abcba7d7bb730933e5db41d628fc2d767a789958acb56843e9d0a831d3c8ec5b63d845bc3479beb5865d8acb128d1
TLSH
T155D0A786649867AE48141F07F0E169D7B1C8CC37A8A8A820D7D546749ABD9C85162857
MD5 SHA1 SHA512 TLSH

Submit Download

56320f19-8b09-461c-bed3-d55840e25a85

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\56320f19-8b09-461c-bed3-d55840e25a85
Size 16KB
SHA256 10f117a26d50e522fe53d219f64e6f824406d6d309685209049b4dfa77a15e5f
MD5 e39dcbd6065e86002b14805f89221dff
SHA1 bd9768db29eb362eebba9b828d151e5dfee98afb
SHA512 112477c91bd99bb28c3f63fd899e37967046d1722b6e9ff8abe972fd5b65e0cf943b09d8b38dd3d049d84aa0f88828fab9e48b52db057a86a4e0853db906b6b1
SSDEEP 192:N8Z7XBh51IuBHl0RdUpzif7JNbSRvy58qyiNEQ+CE5ZB2S+V2023Gcx0IqCNym:N8Z7xr9l0XUp27JNbSRq6prLFquym
TLSH
T11072B8566820597A8251E7A8D4FC7FC3E2F528CF4C418FCE8BE0BD085DDA06E112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ec9916d-932d-4354-8d48-d984ae9d3954

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\7ec9916d-932d-4354-8d48-d984ae9d3954
Size 962B
SHA256 35431a4069fda18c4cbebaa9e7f05e7a06e4766cf229ac660d9182f46679333b
MD5 aa04a2ccc193c04249b5381f54ef6a90
SHA1 d07144b40b89c8678c23798932477395eccb5e61
SHA512 8066253b726fce3c3517e88eec3e954cd0d2a4c909b07c4808443df09f488ee026ab8e4ef5a321b1d969174aef1775efe74e5ece90a25c60b9e72869c8d7dcb0
TLSH
T15D11CB418524B9B2CD79E39784A077828BE43123C0CA4D047DA8AB284DEA56E637BB07
MD5 SHA1 SHA512 TLSH

Submit Download

84f4ad5b-a40c-418e-bde0-5bba15a4d3e7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\84f4ad5b-a40c-418e-bde0-5bba15a4d3e7
Size 235B
SHA256 4fa66fd68621ff830cda9d7d8f72aeaca4ec1f49b7278d0ead01dbe009026238
MD5 9096a01751e7ab896b778dfa1f01db5e
SHA1 473b7ba1bba791f7cfe6e9d6a29df49e9f2810ee
SHA512 9f28b1cdc5f4f14fd266730f35644a5a165b34eaf2c48d5f098b4f6704dbd4bc78b025e35ae871069b45ea022dd8c9d752de5e409f60ec2f04929a157dae2169
TLSH
T1CBD09780148C23AC08040F07F0B0B9C230894C3358F87820E9A08039DDBEACC4253C07
MD5 SHA1 SHA512 TLSH

Submit Download

8da1ddd4-8812-4e0b-b78a-8eb2bc029755

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\8da1ddd4-8812-4e0b-b78a-8eb2bc029755
Size 886B
SHA256 482a53a6c98dbcc79210a352fb467db85385029083c2daff4b887d3ff3647e48
MD5 6b299ae4f4647c86ac3f75a59f2f3d6a
SHA1 d9aa187edba9fdcca7e9695a67ab118d56c94c99
SHA512 c2ee318e654550cef6679a27ae6c403d2f2a6d5759338f50b3c25fb0713810c280b16e3440145b9c3418f2ca88fbc03d2248aceb63631c68806446c69d6bd7fd
TLSH
T16F110081C665B972CC78D38B84E17B424BE03063C0DA4D143DA0AB284DBF11E9366707
MD5 SHA1 SHA512 TLSH

Submit Download

fdbbae5a-d5e4-4287-a79a-dbf5113bf139

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\datareporting\glean\pending_pings\fdbbae5a-d5e4-4287-a79a-dbf5113bf139
Size 2KB
SHA256 bb3815180568f9d1ec7cc8a103d740114a247997d22ee959a63f9ce213b6580f
MD5 65a4ba4a260694035756a01cb3542b76
SHA1 97133189f577111271c9355388909ab78e25baf5
SHA512 59251776029d619494f9f0c2de9673169aebd947bd20a691e7ee973bc453ff5da3b062c189ad8065f960af819fa4217bbb281b348c80e335d1d8845b40f41270
TLSH
T1FF41316C75B84C769CDAF19D8491378E53F08A4700921C436E91EF0CCDA779E336A42B
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\extensions.json
Size 14KB
SHA256 608115f77250171254420630f5a3ec02f1de543cf90ae13be8712a4cc9198cbd
MD5 b5bfe46bc1191aca8c35cf995c6eee33
SHA1 d6af0cfd485137209519c55f95fcd2bd21bbe27a
SHA512 70fae2c855278ef074fbfcfc317266013061e693415dc87fcc119340f1d137cb5ab95d6c1c721c2114839e776e959b7a58565abd125f2c7bd7d8863111f3d40b
SSDEEP 384:mkI4vBUmldvj8dhWv94zt96okL4HXL4PjL4HYL4HUL4HC:pI4ZRfQX+4v6J47434a4u4i
TLSH
T1BF62431545148EB8298F979BAA367E01C37D473B70445C78F4DD8FC842FA5B902BB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs.js
Size 6KB
SHA256 d3edf1c728cad05c4315745cacc4fe0fdfc801bf675198ab8e12470b41460176
MD5 c53ac823811c5af37f10dc38b65e322d
SHA1 79fd6ad88e711e60a9ef14584cecb66f3cbcbd2b
SHA512 7608f5e5bd2fe7bc410083aa384a7b59f96ffc282d611ddd704536f6b51202ef0bc79a7f8b36240b024b6934a3d5b540bc6fbb07a6dcf2a6a837a5e60895819f
SSDEEP 96:xHV6UTUWxqGqa0fmlG1zSUSSl4dv9jAnS6HVxNUoBw88u8L4cn3VSpp:r6vRLfmlGxSSY0HrBw881q
TLSH
T19EE110789008CB7F74B6776CAC6888316AB2413B77BF68D750B65484055CF3441F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs.js
Size 6KB
SHA256 1f072413c05a92edcd6113651d542fe2e088604d9148a0ffb9511c4d132ab964
MD5 a8f678b57bf7a5da63b6bbb78f984ec1
SHA1 f344dea180db12d4d21e95d6c97d79b6592b3c1c
SHA512 40e69e7f4c5bb82060cb5e6adc745801cad9a1d6ada6b1a48b068d31ef15cf1525c8d60962552c2ac232017d8d5dc05c638cabbf0806c27ff26b70a6cdd96aa6
SSDEEP 96:xHV6UTUWxqGqa0fmqJObzSeSSl4dv9jxnS6HVxNUoBw88u8L4cn3VSpp:r6vRLfmqJESSB0HrBw881q
TLSH
T191E1307894088F7F64B6776CAC6888316AB2413B7BBF68D750B654C4054CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs.js
Size 7KB
SHA256 2cae1f30dc09a7b4a7459a04c50ee79a93ce6f7f6ce8393e64585fd4b101b0c6
MD5 aa979338013c0363747b5915c11c5cd7
SHA1 e1cb9a3ccfc690b9e566f120dcd7ed3befea2847
SHA512 19e74e153619cef13922aa68eaaf382e4f13e9897a3a01ea050ddcb19224f770bba139f22269fde0c4249dd313da514bbc85b81b6255399c6e835131a39060a0
SSDEEP 96:xHV6dTUWxqGqa0fUqJObzSeSSl4dv9jxnS6HVxNUpBw8838L4cn3VSpp:r6KRLfUqJESSB0HCBw88uq
TLSH
T18EF10F789414CB7F64B6776CAC6488315AB2013BBBBF68D750B954C4094CF3841FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs.js
Size 12KB
SHA256 df8bcf9b12a9f7bc6fb5aaea8c507bf67317a14a6d5c10ade7c6adc30411d1f4
MD5 9bfbdd132c9b8e3beab4d013503bb7b5
SHA1 412015aea32f549555b492c65f92647e7a736b39
SHA512 2f2c47b327a772a822a84cd6701276d2dda6d8207cb00d75577e570a1db545543264f084e3e85a3f80cb2df20f24bc90e6be125360ec24d08950c16d4f0495b5
SSDEEP 96:xHM6dTUWxqGqa0fUqJObzSeSSl4dv9jxnS6pwoDR/5xNUtrMOBw88SLLKy2/Y32k:O6KRLfUqJESSB4LRjLOBw88SKy2/Y34e
TLSH
T1EC42CE3C54058B7F60B6327DAC258971695142277ABFBCDA46F984D20C4CF2441F7AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\prefs.js
Size 6KB
SHA256 397809674566cf2acf4040311c1821368f574e2effd50624ee4240c082c5455f
MD5 f9b5f8431d85d2e3fdd3e1d58d8cdbb9
SHA1 f48617a65c8ef088ae6e732defaf156afc814c6d
SHA512 be0353eabc74eeda656a423d867776f611527f2282c7f5ffac9ea566ad173567c28f604a36875853228a8731d526f99a556df01ef1cb52d9adf30d347f157109
SSDEEP 96:xHV6UTUWxqGqa0fmqJ1zSeSSl4dv9jxnS6HVxNUoBw88u8L4cn3VSpp:r6vRLfmqJTSSB0HrBw881q
TLSH
T10CE13F7894088F7F64B6776CAC6888316AB2013B77BF68D750B654C4054CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 41fc265d020ba78a112740276dc5883a542ab70a66d88bd93fc76b7f3b4505a9
MD5 a70dba4d48c783e568a4dde2ed925b78
SHA1 d82340e14a39346fa6f121ec7bf0f143d92bc89c
SHA512 0927033200d3890e29c88ae0afa87eb2034efa7866a7f3f5192b52b4e4039f58a5583ad4bbbaac3c097a144926aabe2834d4c44e4aad04c5e3273dfefd517337
TLSH
T1F42108C194272EBA7A932267E0844FF283992431867040B0620E8B02B4AE41D7797604
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\v0mjt9aw.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 02b08b92ff2b158c1948e166c1e65b9531fba01fe0cb694c305fbb798d1b3309
MD5 0eebf7aa4170f03ad2a069e58f983226
SHA1 eb15511276bfbd31962e67e1d1617086fccd0a1a
SHA512 b4b68a9210f1fe0cdac9ec2440ee7491d962e25f9dd4af4fc49bb58d517a30318ad212cac0e52b5c28f8f4abce9cca644eea3e796d3c541c6276e71e59f1afd1
TLSH
T1B72108C194272EB67A933267F0444FF287992431827040B0620E8B02A4AE41C7797304
MD5 SHA1 SHA512 TLSH

Submit Download