251563d5fc9c2eb51f30af5e6e52842b487dda86a0c1fc7b42a5f6e489a6020e

Analysis

user interaction
yes
max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 17:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PhaseLauncher.exe
Size 1.9MB
Sample261102-vrkskavyc1
SHA256 251563d5fc9c2eb51f30af5e6e52842b487dda86a0c1fc7b42a5f6e489a6020e
MD5 7aae2eb3ebcedfd9a76a8a354e2f368e
SHA1 03a4c34c870981cf614ec880592f238c3e857580
SHA512 ea79d09fb3bfa6c1e85339c477bef7cb25d1dd7f05b514f57efa5f2ee3a34fbccfb17dc0371c81853e2fe7f6763a601c0003128b7dc3c7ba14175788d5437ab6
SSDEEP 49152:xhVrr+ifd6nP0hxgqSLvDIBkZmK98cIJBqSNLuj/as:rJ0s490kD98f9Ki
TLSH
T1EA95E037F69801ACD1B6C1BACB578913FB72344903316ADB13909A662F1B5E94F7EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
106	5996	firefox.exe

Executes dropped EXE 1 IoCs

pid	Process
3748	PhaseLauncher.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File created	C:\Users\Admin\Downloads\PhaseLauncher.exe:Zone.Identifier	firefox.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 20 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Local Settings	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\PhaseLauncher.exe:Zone.Identifier	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	5996	firefox.exe
Token: SeDebugPrivilege	5996	firefox.exe

Suspicious use of FindShellTrayWindow 9 IoCs

pid	Process
5996	firefox.exe
5996	firefox.exe
5996	firefox.exe
5996	firefox.exe
5996	firefox.exe
5996	firefox.exe
5996	firefox.exe
5996	firefox.exe
5996	firefox.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
5996	firefox.exe
5996	firefox.exe
5996	firefox.exe
5996	firefox.exe
3748	PhaseLauncher.exe

Suspicious use of WriteProcessMemory 41 IoCs

description	pid	Process	procid_target
PID 6132 wrote to memory of 5996	6132	firefox.exe	100
PID 6132 wrote to memory of 5996	6132	firefox.exe	100
PID 5996 wrote to memory of 3568	5996	firefox.exe	101
PID 5996 wrote to memory of 3568	5996	firefox.exe	101
PID 5996 wrote to memory of 3568	5996	firefox.exe	101
PID 5996 wrote to memory of 2056	5996	firefox.exe	102
PID 5996 wrote to memory of 2056	5996	firefox.exe	102
PID 5996 wrote to memory of 2056	5996	firefox.exe	102
PID 5996 wrote to memory of 2056	5996	firefox.exe	102
PID 5996 wrote to memory of 5208	5996	firefox.exe	104
PID 5996 wrote to memory of 5208	5996	firefox.exe	104
PID 5996 wrote to memory of 5208	5996	firefox.exe	104
PID 5996 wrote to memory of 5208	5996	firefox.exe	104
PID 5996 wrote to memory of 4252	5996	firefox.exe	105
PID 5996 wrote to memory of 4252	5996	firefox.exe	105
PID 5996 wrote to memory of 4252	5996	firefox.exe	105
PID 5996 wrote to memory of 2352	5996	firefox.exe	106
PID 5996 wrote to memory of 2352	5996	firefox.exe	106
PID 5996 wrote to memory of 2352	5996	firefox.exe	106
PID 5996 wrote to memory of 2352	5996	firefox.exe	106
PID 5996 wrote to memory of 5224	5996	firefox.exe	107
PID 5996 wrote to memory of 5224	5996	firefox.exe	107
PID 5996 wrote to memory of 5224	5996	firefox.exe	107
PID 5996 wrote to memory of 5224	5996	firefox.exe	107
PID 5996 wrote to memory of 4464	5996	firefox.exe	108
PID 5996 wrote to memory of 4464	5996	firefox.exe	108
PID 5996 wrote to memory of 4464	5996	firefox.exe	108
PID 5996 wrote to memory of 4464	5996	firefox.exe	108
PID 5996 wrote to memory of 4304	5996	firefox.exe	109
PID 5996 wrote to memory of 4304	5996	firefox.exe	109
PID 5996 wrote to memory of 4304	5996	firefox.exe	109
PID 5996 wrote to memory of 4304	5996	firefox.exe	109
PID 5996 wrote to memory of 4300	5996	firefox.exe	110
PID 5996 wrote to memory of 4300	5996	firefox.exe	110
PID 5996 wrote to memory of 4300	5996	firefox.exe	110
PID 5996 wrote to memory of 4300	5996	firefox.exe	110
PID 5996 wrote to memory of 4760	5996	firefox.exe	111
PID 5996 wrote to memory of 4760	5996	firefox.exe	111
PID 5996 wrote to memory of 4760	5996	firefox.exe	111
PID 5996 wrote to memory of 4760	5996	firefox.exe	111
PID 5996 wrote to memory of 3748	5996	firefox.exe	112

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\PhaseLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\PhaseLauncher.exe"
1⤵
PID:4520

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:6132
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Downloads MZ/PE file
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:5996
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2008 -prefsLen 27099 -prefMapHandle 2012 -prefMapSize 270279 -ipcHandle 2100 -initialChannelId {24649d42-5472-4725-9d18-6c02fc97e832} -parentPid 5996 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5996" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:3568
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2480 -prefsLen 27135 -prefMapHandle 2484 -prefMapSize 270279 -ipcHandle 2492 -initialChannelId {cc3530ad-f0ac-406a-adc9-f5ffed36cce9} -parentPid 5996 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5996" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:2056
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3616 -prefsLen 27276 -prefMapHandle 3620 -prefMapSize 270279 -jsInitHandle 3624 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3632 -initialChannelId {7d201fc9-5804-4198-a812-83507ff2d9b4} -parentPid 5996 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5996" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:5208
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3776 -prefsLen 27276 -prefMapHandle 3780 -prefMapSize 270279 -ipcHandle 3880 -initialChannelId {9e1b4daa-7495-4dcb-b4bd-4310a89076e8} -parentPid 5996 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5996" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:4252
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4380 -prefsLen 34775 -prefMapHandle 4384 -prefMapSize 270279 -jsInitHandle 4388 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2896 -initialChannelId {fdcd5564-add1-4311-a68b-581e8c85e209} -parentPid 5996 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5996" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:2352
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4880 -prefsLen 35012 -prefMapHandle 4884 -prefMapSize 270279 -ipcHandle 4788 -initialChannelId {e8326a91-8e1e-434d-afd9-06bfcbc135e2} -parentPid 5996 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5996" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5224
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5112 -prefsLen 32900 -prefMapHandle 5116 -prefMapSize 270279 -jsInitHandle 5124 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5132 -initialChannelId {2f36b236-e2dc-4b6f-a593-da3adde48f17} -parentPid 5996 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5996" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:4464
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5160 -prefsLen 32900 -prefMapHandle 5164 -prefMapSize 270279 -jsInitHandle 5168 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5172 -initialChannelId {8d22cfb6-094a-484f-8576-5558d6e25f4c} -parentPid 5996 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5996" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:4304
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5516 -prefsLen 32952 -prefMapHandle 5520 -prefMapSize 270279 -jsInitHandle 5524 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5532 -initialChannelId {9e8df980-d084-4e26-ba9c-d52a22fcaa04} -parentPid 5996 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5996" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:4300
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6272 -prefsLen 33031 -prefMapHandle 6276 -prefMapSize 270279 -jsInitHandle 6280 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6288 -initialChannelId {e26c9a17-f1d2-415a-b614-69c113555f01} -parentPid 5996 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5996" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:4760
- - C:\Users\Admin\Downloads\PhaseLauncher.exe
    "C:\Users\Admin\Downloads\PhaseLauncher.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious use of SetWindowsHookEx
    PID:3748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\activity-stream.contile.json
Size 4KB
SHA256 54bce7cd162946df5afdff4ae97b593656d9ea6c389c52b1fc55b3cc2c1bd277
MD5 2f2059799c8c0008475c5a0e941e2190
SHA1 f5146ead4b5deb3ef061e72d3e017c99fb1379df
SHA512 3dd99dfd2cce88787d55707adb76c75803c49f9177037f4499d601f199d78e3a61ea397e835958db2daeb292983923ec504639a7a70560da81b5788e959b9b0b
SSDEEP 96:Tg2KMS55mWuhe4UT+mRt+n4KY+cK+SK6Dw9lz:0jMI5dwe4FmRt+PmSKww9F
TLSH
T10091E95FE4744A931B31BAE12C4B3A9CF007B408F9F48F5971579C21C6EC7B991EAA44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 ea51ac656910805a7660fb8cf6f1e086d55299a2acda93a6b6920e0f2fcfedad
MD5 4e03bdca0b2e385d07f348a09ab4eb60
SHA1 62a3340f1f501d308df5c3b25c2baaaccd2e6226
SHA512 b896cc480e6d019d9a0c39cd97183d5231f7dcf2600863a9352779562c6378908638c64529c0b875f7075cfde868f38a40dc5134528f89838b5dcb81ec39877c
SSDEEP 768:JyT7TQQsDusWsZAXi+bq7hJYCd51whviK2trOOrD5y+GmGPwlVthwiV37raSm0:oT72SyjYKetJY5TGmEMVteiZGSH
TLSH
T1E473E8E3A6E8B1BB0FD137C72C0F795B63E20196E34506C8EDA9C91C81DD754123A6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20871

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\doomed\20871
Size 256KB
SHA256 2526a184a37dbd6da7be200848cb5be111ddec06f37cd84abaeb9c1f629b7eac
MD5 cb481e16b497eda3beaf60029c7b6cb1
SHA1 459b020b410cf399f76560bd3df9fa126f9d5d63
SHA512 4f736954a009510a377468e5a1fb1dbad1418b267c88ee1dddbc73ce41c146107f7b0d57f30b6e81a6c42691262f7caea7abd0df11e10db917bf3f28021cd325
SSDEEP 3072:RSKpUyO6H4VcpBurEGBv4Ai5/FX6JP2Zj3U:6lcyrB
TLSH
T10444F7F3D6AC30FB075296DC2C0D72CF62AF417ADB5209DAF86C8158C3C9A6510B6799
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

24402

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\doomed\24402
Size 53KB
SHA256 7892bf871721ed9087b64ab86025680e3bbeafb74c73c4a50ff12a5ba341aed0
MD5 2058ddcb5093659956ec38e5f2c82d8a
SHA1 c308a456bd24033d41066eb9eb0046312e53346d
SHA512 fa00d230b2e30b7a81bae3c59ceca2455f93716d77f4e598d388fa5d9d6d789b04d1c866b2e8c3e759464db407334ce0157d5814f73fecea5726136b1bb93a71
SSDEEP 1536:LsEcy7fXRGqqHmr7qv32UC7UetOGLk/oH:LHTRlqHSYtgQ/g
TLSH
T10333013DCF8A8972C3371176EAA4D3456E25167BFAB9C9D87C20050909C57B0B55ED0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

282

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\doomed\282
Size 252KB
SHA256 0649414583d56bf1add5c509196942cadabd1af1d8155c28d1568181e8ecc126
MD5 4779cbaeb45c24d436fec6f15cdb98cb
SHA1 cb43e842469fb924d4a7beda81eace5920ea6c95
SHA512 e8503a6fb4bac9c4f19e13c9d6613cce1abab883a0e98cc860e2e8684cab8959a4b39458e864b4501c7cf7761a1de2f745c3f6f29ba0e9134e4c65389b200217
SSDEEP 3072:8SKpUyO6H3ucpBurEGBv4Ai5/FX6JmyBVrt:ZJcyr5
TLSH
T11B44E7F396AC30FB175297DC2C0D72CF62AF4139DB5209DAF86C8158C3C9A6510BA799
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32075

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\doomed\32075
Size 52B
SHA256 91b02caa6101c229255028edaaa8e7f68b56e558db1d82fec8f0474b9bb6ce25
MD5 a48db4be0a4a1c53b32cc19420aa9f70
SHA1 53d7bf27b1d7c0db9ee9b07b93594c4a48f3bd14
SHA512 810d7cece0064f7d32db4e2bbb6e40eaad3262254971a600ca93f7f623f50ceaea4c427337d85fa10b7045b7d6a8451ea523414d9e91baf898ef4623f4024e2e
TLSH
T100900404F771D740F414F1735D40C0F44C703D1044D507133CF107D145514D30100005
MD5 SHA1 SHA512 TLSH

Submit Download

06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
Size 16KB
SHA256 1c217844f7b687c546409849212de3abfe031359a02b25d3ca8cd07fcbcbb4a8
MD5 784a056688e1f4fab46802e7aaae1e94
SHA1 e22a6a949afae6d00deff3e40d7a05276982f195
SHA512 f628748d2e10c99698764eeaf22dec041b697cafadb82d5889ad72b767a0922445e32c51c4d107b668ea984cfd9596729000be445d84ad61c278621a97088a6a
SSDEEP 384:HXwIiO024YoWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAjN5:36ZYoWTToXJWTTogB7S/AmVAf+hRMyN5
TLSH
T19C728D7D9F413CAC1767D0E8C8B983558D18B6A7DFB5C02D15983E09CA88A6670F584F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 ce2e137667ce650aa95f1619ffa3835ea72fcd5d499e569503e1d4f0f4e25cf2
MD5 6cf295adf0fa15e70dd80071c311db1f
SHA1 dced9fa88ba37d3b5f9f86b3a73c28019d98215a
SHA512 b4a2bcb4f31390562089f78a990201a53b7b9603242a537dfb5c5bce7f14e70a534895d8876e103651f7d190119b999e875897bce186c800aa6c05a5f261e768
SSDEEP 1536:jTrlinv/0DJ2H6cvcLOacRh4X/ukBhNHM/AI74gSIKo7qbu8XB6Z2s2aKMgpdWBR:j3lsH6cvabBLHSEMi8uX/WBOUGO/Z
TLSH
T1D5A3AEF6DFA28D3D64FFD42D9682C93EFD262440B3A72019C8533714A1C6BB87679648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 f3a0b0d1be3a7dcb3869d1efb9427a332988d9bad32cca0d64d840cd69bb034a
MD5 33cf51fbd23c53c3be5aa2961ca56fcd
SHA1 aaaed77743232e39753bd9d284c27d157155f90d
SHA512 51287521c05e736acbde5de5a7b97dfa70518f92eaee7ea3104b64c516de579abe93bf0a3f38b9520cb24f84090e96d0c8b97adccbb1b0f5e104a726c0f8988a
SSDEEP 1536:XTrlinv/0DJ2H6cvSHYwaHbj6l45EmkBhNHD/AI74gSIKo7qbu8XB6Z2s2aKMgpd:X3lsH6cvLPb0LHjEMi8uX/WBOUGO/0
TLSH
T1FEB3AFF6DFA28D3D54FFD41D9682C93EFD262450B3A7201AC8133714A1C6BB87679648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6959cf01d757d185df14670db627f56.png

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\thumbnails\e6959cf01d757d185df14670db627f56.png
Size 54KB
SHA256 48928238cf5fff3ea345cca0ad87e404401373e5b1f8aab10ece4548babce7f8
MD5 4fa942e5d267057bf5dd7de3445f3c0e
SHA1 5f3f0fd65e80e573beb97e4ca03b2125d2f270d2
SHA512 750c0b4c5b2c1e8c5b18838e86aa50fb095085a8ee1f82e197c24e368359a7d5d1eea50034dc0866bdbd3ef160e856da6192dc712cbd40b3fbe818a52bc58268
SSDEEP 768:PDPULSYwmz7rHlDuRvvw7OjUR0nGblFKVaNETOzr4xqJ+6Wxs:PDP61v4RvIRENWEks6ms
TLSH
T12143026BFEEA5C050B5A3B5DE5592DB247EE084C006D7784EE0AD8C8D69C8D4E60FB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6959cf01d757d185df14670db627f56.png

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0inymrgq.default-release\thumbnails\e6959cf01d757d185df14670db627f56.png
Size 45KB
SHA256 c9da9a578a3bd113b30da1b1a8ab222a4026a08c281000e2e678988131218826
MD5 30e1b4967377b9cc563f1f2f08a1a625
SHA1 6295d572cc7addb38693a7870bd5ddeced85b8ae
SHA512 3fac129d7dda631066bce17161bdb019c5dc0cc04b5c40e448954a886964f91e835c761cf0e127d6053bf84633a9d21e8de5dba1f7ecaf4d81ca50c0a219a1ca
SSDEEP 768:92MNthzV67GTzoSVc+mH8bGuUlRav1PRFnkmoxeDUXZEtaJyrTORFRxpZ85I8eP2:wulQGT0b+6sW8LtwJIuyrTORFRPW5YLq
TLSH
T13F2302BFF84686240067289FF50C2F51F868499178B8A893AA839303CD5F1B7B9F7543
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.9MB
SHA256 1090c5d6881985c042370d506e15f1db1d0a88bfb7e9602a9202fac421098eb3
MD5 322a050bc53af9aad7a659054354862d
SHA1 44dec61c400db851b57e4e2645fb253609db7d1d
SHA512 ae8624becb7619dd9602f416203c54096ae0e23c4c2574c8069e633f9682b0b9bf5bbb95e94fca6610b9581746d5ed648fd41c47d762b174bd5d632937df6689
SSDEEP 393216:vKuarWwW0LmrEr38dudevJCJU2kpq1gL2aVRHA:wWCmz0dwJIkpqCs
TLSH
T16337E14AE35310E9E81ECDF4866E9A62E4343C4E03319BEF17D47A355A727C42A39F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\addonStartup.json.lz4
Size 5KB
SHA256 89dea2ff143546f099a9662242368d52fdabbb5e05d639f57a33c73e39817787
MD5 24c97c2d9851738dc273ba3ec6a8353d
SHA1 6ae5fbba50d81712dc1acf5a04542c99a0feba33
SHA512 37a1d8803788a53c4a09f20eebe1f604f0f49e5369f19bb4989f51f6b5685b30fc0acc4bdf348632fe67b235e040fb87b022ff2e47d9196aebadf6bcf3d1eebd
SSDEEP 96:K+4sHNw6M2xWGhD41MgGvmHhF+8PHsHR6QH7BzJIN1C9ZYvjYy2S3:k52xxhD8rGvmBF2HT71JI+9Qp2S3
TLSH
T1ABC18F79FDC4EE617F36940628D6BFB2DAB59F3415FA8890B19D73110DA4A726201381
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\addonStartup.json.lz4
Size 5KB
SHA256 c4a6e36f18384a5103ace435516b1369af7661d6b565cd832ea84d5ff8099c26
MD5 6535cb47d1e98e858ab6f455cc4418ca
SHA1 7515d89cf81ba87127d0567df8649f0aaf17a978
SHA512 07cbf1e26b0dcae908f6747807cafa7bd9b4b37a8a56fb1d6ee8a60372bb12578bc0f54efa2dda14f9ea8bfb2423117810bbfe0d1357206559c36f61efc2d87f
SSDEEP 96:lU55sWNNd2xWNhD4fMgGvmH6M++PHsyRdQHg4zB2k9N1bU8RXBYjjxyaY:lW2xohD4rGvmaM8yqVcMM8R6saY
TLSH
T188C18CB9DC88FE15BF76944EB8DABB32C6F91E3411D98821B4ADB3014D90AF11345390
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

broadcast-listeners.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\broadcast-listeners.json
Size 221B
SHA256 869ab815eac07e856e7e37ea5988123ba60ea9bb5bd038f044f2b4be83b2428c
MD5 0c0724163642c0bb56be531129f5525e
SHA1 45bed96d31803d69c5389a6b82a1554b31f55028
SHA512 497a2c5b6e0152372fd874a95459b2e531b1ccab88b41147b0eb78f5573a5ec67084818b07052950fc01a1ee27ced909aa4cc2845d74feb53a9398b96efdfbf3
TLSH
T135D0220E24133C7F4B886739F00527824B9A240A3270903DC3AE24A41A6AAEC41492D0
MD5 SHA1 SHA512 TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 58KB
SHA256 6fa199c432478dcf50ace6a3acb69a942fbb63c55a85735ca00da468328de15b
MD5 318c55acc8a79c388a7d79daef7d12d3
SHA1 527ead683203699c0d3ed54ce904a8bfb32ff1dd
SHA512 7ee3ce5d5728244ddfdeeb65f52cc8069e05f5f7796981744ef24857e8d104cf66f8acbfa7d551958f356118597643924eec31259126115c34e315ecbe782eb3
SSDEEP 1536:8ejMGmGkb1TOjoOF3K6FWu16SgeA2XhBo4ip0:8ejMSMQJcK1hrL4Ve
TLSH
T1CE431044EB1E553FD82802BA9C921B003F78F889591A2FAB375C54786D873DC3D9E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 58KB
SHA256 3c53dbad2012b16dddee346e8f29e9bdd46fd4522c7ce2e1bedf1f8a6627a981
MD5 d4b8eace1181d15d20c5e0508044c199
SHA1 ebd2d143a9f85276eb28d666375dcbc167cc239d
SHA512 81b03f761751ebea40d621996d07c336dbf1dfb8e593a7077272e08ec7c5ed1dd839966c1d3df3e366fdfdc35bce8c66716a7b6a1ab51057b2c30ba197f1c6e8
SSDEEP 1536:nejMGmGkb1TOjoOF3K6FWu16SgeA2XhBo4ipL:nejMSMQJcK1hrL4V5
TLSH
T199431044EB1E553FD82802BA9C921B003F78F889591A2FAB375C54786D873DC3D9E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 30KB
SHA256 c6a3d80cf4029e2a2bbc1f9cd183bcb7003db858e44ea3d15cb431a0ef8672f3
MD5 7334f03b3c97e17ef980505fa73a2e1a
SHA1 c343d2919ed686445fd18ac4170e9ca566b2c892
SHA512 889b4bc627742f4981b881807999d8f67871b4e983658d7e63ae333d42466c601189b8db12dabf09e5802b80a5d484caee54784a6abc6c66489b022fc2a3127b
SSDEEP 768:1Y5j39tZ+NLgMUGcmhu6HK+r7SVblbcjRE/:wj39tZ+17H3U
TLSH
T1D8D2FE84FB2A953FD41512BBDCA50B042F79F88658192FA73A4C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 e6ed4bbc9e40c551029b2ab650e8a13ea62498938dac4c00a529910c0c9f9ec9
MD5 2a6f938817e249393f979cf9fc1e004e
SHA1 be0fb8bf7bdca33c5aec3e892f9fcc0a31dcaeb0
SHA512 48c263862ddd7a3b854dcd26d77767af33d74f9d0c19d95d9cc30a332a58a815bb572c3c5201eb935a96f4ef7adb7dc8afe2c40f96f69076338ab5d5e2ae914e
SSDEEP 192:V1d66JozGzgCl6mc0doOv5zboPsZoCyj/+:Td66JozGzgC1jxbo0ZoCyj
TLSH
T11EE10FA8E628863FD408027BDCA61B414F3538DA9C8E3F29759D641C2D572ED368E1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 47edde80e70536c9f2842f44d929404e0607e4347890ea5d0ab1add2daf5b92d
MD5 e20af23a61310a7e75812639005bab21
SHA1 a64b789bd58872d345eca3fac729f0167a8d40c3
SHA512 1fd403eb15958cacc9cd37b9d8c79a9b817189ef598e9c0df021f03fa81f1723bb903fa5a45e1929e57a6681539efc51617abefababdd47401a4e266a7486567
SSDEEP 192:61d66JozGzgCl6mc0ddOv5zboxZoCyj/+:kd66JozGzgC1jUboxZoCyj
TLSH
T1F8E130A4EA28863FD408027BDCA61F414F3938DA9C4E3F29359C640C2D576ED368E1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 30KB
SHA256 34aebeb40b048ed6c00dd0222c045ab32039a121658f2d7c42d2bf31449c3dad
MD5 f3144b1c83b87b07f1704fee8c08a87d
SHA1 7900ce966a7383d20bbd34110bb754325851dfc4
SHA512 3556d8c1e6700d8ef0c82c297a972f8db52930bf2894a482fc4aed91d96e3cd906efdd7a622eddd4cf96544b00c5f258d2f8adaef0fa0221f9788a6773f97c94
SSDEEP 768:cEMt5j39tZ+NLgMUGcmhu6HK+r7SVblbcjH:Sj39tZ+17H3j
TLSH
T189D2FE84FB2A953FD41512BBDCA50B042F79F88658192FA73A4C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 b821ee5e428156b482f07e40f2582509a822e38d3fabe321e5b62a2f4c7be98b
MD5 e3b46c5d487aa9615f53a3b4857f6cfc
SHA1 4a463640702f81b4edbbdcf928c10b6192e140c0
SHA512 7b8f65f1d42369bc817560e5972f1cc99546f09fac08607fd065de50466a4ac9f8ca13b0a478d6fb875cd2452a24cce735186da22ae5fb42e3ecedc6112360e5
SSDEEP 192:dOv5zboPKoCyj/OJ1/66JozGzgCl6mc0dz:SboioCyjI/66JozGzgC1jd
TLSH
T169E11FA8EA28863FD004037BDCA61F411F39389A9C8E3F29759D641C2D572DD768E1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\events\events
Size 1KB
SHA256 ad9d8858d1bd7bdf94405f44bdb108abda69a413ee2090a5043186fbf33e0da7
MD5 c5bbc00ca974524877bbb67625539203
SHA1 771bc1897c4f7464d87fced73f134224b22dc9dd
SHA512 f8e3154c0167e9feae38111f5a8be580b1bbf3c75a9d14396e2cab222c102e7f38082fa9b99abc46b0fb12047a244df9ec1e9f4a7d135cd61f53040b6ed9bbbc
TLSH
T15C217C4C39B84D6A5887FABC7440118EDB698E1B05871D834D12EF8DCDC1BD932EE879
MD5 SHA1 SHA512 TLSH

Submit Download

0c4c3c52-548d-45cd-89ca-30de366c311f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\0c4c3c52-548d-45cd-89ca-30de366c311f
Size 235B
SHA256 2004af6812a3afafb8f6bf0661735fce93736956031dae8ef0ab6b56d400fba0
MD5 6f52585967c8df817f737d0575f491f8
SHA1 186eea24e02919009bfc910da7e9faf902a45335
SHA512 16a9216a6ead06bb9e8919687872b454db6a7679eabc1c7a985bdd7ca7c0544bc90d6acbe861945095560ffe725fe2a4fbdc69371b4e6cdd914e03a3dcc08ee4
TLSH
T13BD097942688A32D08100F0AF0A03CC230588C331874A810C9A04A7499B9EC58132D0A
MD5 SHA1 SHA512 TLSH

Submit Download

17d680d2-1cda-4ec0-a076-4390dfb2b0cc

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\17d680d2-1cda-4ec0-a076-4390dfb2b0cc
Size 883B
SHA256 173094a04e5b0920a3165b04e261a43e50ead81ad59f01c29777f2055812787b
MD5 8a5ad94d5359247012c036ce483e8b11
SHA1 f792daef9cb88e26ec2d6b34251d8debd58d4c07
SHA512 90374061f3e521b5e512a14730c3566fd3c300b6aa33ea64c4ed6484ecdd6b1866294934daf1b9cd285d1230fd22c9bc52799ad413734c06b05b62831046bafc
TLSH
T172110080A531B576ED68D20FC5B53B02A7B47563C0CA49143DF54A180D7EA2EA3AB646
MD5 SHA1 SHA512 TLSH

Submit Download

32da6cb3-5a23-4eba-b2c6-75f84f582cdb

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\32da6cb3-5a23-4eba-b2c6-75f84f582cdb
Size 15KB
SHA256 ffa513d298ecf63e0722719f0f913f0b084e5d7a5dd3b911613e64ec0b2f5eb8
MD5 2df43ea14db2d9ce6410492a17e79b96
SHA1 7a4d499893d65d4f1a114a8f270adb9daaa82308
SHA512 a4809404803add9549ed63bc5611a7ef587e0574b7901d040137a36db9669ca2d0a84001933de6463e55c050acef57758f9351f2749b619d6ec8a1a03ccab901
SSDEEP 192:ydxcgVcnl19B7bAbyRf+KRziLccFSzS9CTwupWRKtcCXLeOgqAf/EwouND:MvVcn5NUyzRzi4cFSmUTwqr/uh
TLSH
T1FE72D9562420497AC651E3A994FCBFC3E6F528CF4C418FCA9BE4BD085DDE06E112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

645f936d-a764-4512-b9ed-84aba26afae2

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\645f936d-a764-4512-b9ed-84aba26afae2
Size 235B
SHA256 708bf51a120dacbf39fb2ec72b0de54947503507f1312f3d5ebb9000549c9e44
MD5 e4549ea460c7e2e3e05dc7afbf5831ba
SHA1 2009807b8029ce2f0b2331c6468d18d4582dd579
SHA512 7fb802075234ffda3eed6084d39310cafbf739febba7d5eea72f6ac4d682ddf251fff2935f8f71a106d81e8c85618fbfda8ed44de0b6945fa80daf9f9ec9c5a4
TLSH
T145D097C05488AB9C08028F13F0E02ECA304A4C3318B46820DAA2427899B8DC801A1816
MD5 SHA1 SHA512 TLSH

Submit Download

a84711f4-4e15-4d15-8f60-cd3f2d81b2b7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\a84711f4-4e15-4d15-8f60-cd3f2d81b2b7
Size 886B
SHA256 1e874b297c481e0b30209e427434e9683cfdb45701f7f8192c79237b31aa7f33
MD5 c3a244a53eea2aa4061634bbafd8e7c6
SHA1 21aec9c399c4a2f16b90d3feb891877c59293d6a
SHA512 8260cbbf1d3a2309515acdf3407f5548ff208baeacf9bb2ee4249ad852c259adea9e57f90b9d41cd7bafa9605fad60cb43ac49c7c7eba9244a02417dde3eb54a
TLSH
T108112F819621B5B2DD68D34B84F07B039BA474E3C0DA08287E919B180DBBA2DA3A7147
MD5 SHA1 SHA512 TLSH

Submit Download

b4d4c046-9e34-47c7-9c69-2124c86c90e0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\datareporting\glean\pending_pings\b4d4c046-9e34-47c7-9c69-2124c86c90e0
Size 2KB
SHA256 c193797058511039faf2733e1f898c83f0a27ac5be91173be31ecdba0b6a4c99
MD5 60e343515cd9be0a38905a1f9f87cb7d
SHA1 9cf86c8540b0d999cfafa8e507e5b0340251a43a
SHA512 103870f9c081edfc9f26d1640ff529aa20d0f1424f8a55d891298e9ddea60738ad91d7832233ae63196664b7914a06270e87d46d17b500d64097b5dbf73964da
TLSH
T16E41249C75B84D769CCAF55D9091338E53748E9340C618436E51DE0C8DB6B9D33BB826
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\extension-preferences.json
Size 942B
SHA256 2f56e841373edc1cb41d946163df4cab5ce7d5cfc8b8816115628c35031f5656
MD5 ba1f2874a20e86779a35b437c0d6d065
SHA1 f232cb2597cf5ec4477d9ac0bfa43c756c7c77b7
SHA512 18023b5ccd5838aaa9e3614bc62ec83060304e112ec36184c464cded6e8bfcc98d3efab57ea8c3fa9653052e61bef92784764b6c184b7a61987bce3be1b46057
TLSH
T14711F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\extensions.json
Size 14KB
SHA256 701addd9ae4f25abbfc748274a89f5f30320706cd4eb2c8a73955735e38d7e53
MD5 73cbe49dad4b470645a2a3fcf85b5310
SHA1 09f7410b334ed84caeb5e5af710da2e0f3bc445c
SHA512 30ec0878882fde9075a55cb0ecfeb604f1bd772c87f0eac2d92c30342b128657f76b0928cc6ccf634fc693459ca3d00c32e8ec420910d45bae163ef5bd06109d
SSDEEP 384:qxkI4vmUmldvb8dhWq94zQ96oaL4HAL4PrL4H8L4HbL4HC:qCI4eRfIXn4o6X4C4f424n4i
TLSH
T1B562421545049EB8294EA78BAA367E01C37D473B70845C78F4DD8FC842FB5B902BB66B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-widevinecdm\4.10.3112.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-widevinecdm\4.10.3112.0\manifest.json
Size 1005B
SHA256 1cc15465230ffb75fd028ee3b2189c8774f56bc7dee8dd17b952e6ca92144004
MD5 58954048e70c81669675d4f87ab50af1
SHA1 8ab675ea31801bbb91c33fd381f4c202bfd7882e
SHA512 f9b8c236c9404936b93ba92550c21a0344b657c42cd98e091cda32e33fed860d59ac0cb97451ca61b2d8e6a943a983ded569b1d7ecd541e832e3ca87b39ecbd0
TLSH
T161115E00DD384DD326D4B6A21CC6580957661DAF5CC27E54379E161D4F1C8AB927376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-widevinecdm\4.10.3112.0\widevinecdm.dll
Size 21.9MB
SHA256 7b44e84403fbb3faee15ca2d56eb8432fdf4eb68812c4460abdd20972528e825
MD5 5614c2225ece73a37e47894ff3c19aa3
SHA1 df3aadd22db3b5841fe488c985365269709b4b27
SHA512 8b8e55347a7a496cfe52222670781654ada20accf21f3e2dd88847e0a7a00cb083609a5f3907bcc1f927c1227de20373a744028466663c5389ad286a46fc3286
SSDEEP 393216:SKuarWwW0LmrEr38dudevJCJU2kpq1gL2aVRHy:dWCmz0dwJIkpqCW
TLSH
T1CC37E14AE35350E9E81ECDF4826E9A62E4343C4E03319BEF17D47A355A727C42A39F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\gmp-widevinecdm\4.10.3112.0\widevinecdm.dll.sig
Size 1KB
SHA256 f9f160cb5ca37ef81a3aa80eeb7fef8b302e18c82d92c34f42503e0ab085ada5
MD5 a0dd5d559b24af4590e5cae3ac11a0fd
SHA1 04b83b414c36ab24fd27fe432a690de636bd2996
SHA512 2d69ea26916ed156f214c17d57c158cb680f1119849b8dd1f7315fd3fa6981c9d6ec2026b494d8e2e70e969205f063979287265a94e73704fe392884e8b4e4ac
TLSH
T1DE21E9DD697012242880793E5FEDF016FD3325C2AA3014FF456B65C2BCE376018C462E
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js
Size 6KB
SHA256 5d5c30dacf399ba0ef85fd06b50a6abeb2cf52fb2793189f1e49492c098259dc
MD5 2ca4b2f5a36849fb8a230a8cf1208fe3
SHA1 736b74c766b0339733d99d634f34f973813a2216
SHA512 238eb87dab64041426472e32c9dbd6583e1cf227c699f5818924035024bb14f9b46a65c9d1394e8642a1e7f822f67e881cc0941d867e73cd9fdcbe56bed433d9
SSDEEP 96:xHlwUTUnqGqEfxaO1zS4SSlSdv9jTZnHRHZlejyiBw88n8L4cnihK:0aREfxaOpSSw9ZTiBw88k
TLSH
T159E11F789408CB6F74B6766CAC688831AAB2023B77BF68D750B554C4055CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js
Size 7KB
SHA256 f14915ba855a365fcbecedafe808ca989f891eff2c7e32d5365f5b50c2e3b317
MD5 d1d4ad55ca31b5bdfebd9d5324c6b63e
SHA1 c801c328416252299747a0ba7ba8392e759305c6
SHA512 80bd1c9703ffd4cccc6b5b30e70cf5909972eb4f2f4cab0152aaf8393ab2d8d4708dd02d467f1ff3d4ee1fdc4897e8d88746b66cc7212c6fac8b0be78ccc571f
SSDEEP 96:xHlwRTUnqGqEfxS2ObzSkSSlSdv9jrnHRHZlejyiBw88n8L4cniDjGS:0PREfxS2mSSW9ZTiBw88h
TLSH
T1BDE10F785404CB7F74B677AC6C6849315A72013BBBBF68D650B954C4051CF3441F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js
Size 7KB
SHA256 065a409bddb08a66392e6e361191caca433cba24e380f0993fa4466427c7f41f
MD5 274c2be77f8de5276e75cc412c270324
SHA1 71235579342aec3216043e2e5c26e7ecfee1d1b6
SHA512 3af72465f754960588e3cfff6bc0bf840665d1d53be883f26545d6905ac52d35ee514e8bec473f5ad086d0705e04c258e8aec931c9e5edcfe26a5c99a99a92ba
SSDEEP 96:xHlwUTUnqGqEfxS2ObzSkSSlSdv9jrnHRHZlejyiBw88n8L4cnihjGS:0aREfxS2mSSW9ZTiBw88L
TLSH
T10CE12F7894088B7F75B6766CAC6888316AB2013BBBBF68D750B554C4015CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js
Size 7KB
SHA256 9925a5fd56a83bae4e87bd29fac2abe43a4eab93c902f666873b213ca0b2373a
MD5 a0e5b4a4c10f8645892bf8229a664962
SHA1 843fbaa46dc1cacd76485290232b31c658085811
SHA512 1c1af664f215bd4b8dd66db74a43de708e59438084041be34b832eb1aa23a1fad957ddf37ecf6a1b90b4b500be30d38c1eeb57f51fe8f67e823645653033cc0c
SSDEEP 96:xHlwRTUnqGqEf3S2ObzSkSSlSdv9jrnHRH3FlejyS/Bw88h8L4cniDjGS:0PREf3S2mSSW91TS/Bw88L
TLSH
T18FF10E785008CB3F74B6767CAC6889305AB2013BBBBF68D654B954C4051CF3841F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js
Size 6KB
SHA256 e98d3f661159c93cf374b74d59c8bf331174f31e4982cd04aee08eb9f816f91f
MD5 71a639ed284175fde1cb7816641439d0
SHA1 4148d7f5b4bfa4aa5b488de52cada841c2d776de
SHA512 c375195429fd69faa071b2df338714ffe8e54ef3133bbaecde16a258dd97110375eb9ff87cb319c8aedf56b229349419ab2af425f5ea9e26d709671c57d81d32
SSDEEP 96:xHlwUTUnqGqEfxS21zSkSSlSdv9jTZnHRHZlejyiBw88n8L4cnihK:0aREfxS2VSSw9ZTiBw88k
TLSH
T194E110789408CB6F74B6776C6C6888316AB2013BBBBF68D750B554C4055CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js
Size 9KB
SHA256 b24abec3bad17b8db9b15601159d6835de47f4b3096e3aee4e792c5112aaa39b
MD5 36fa4c2954d3b17bd5aa845c9e564730
SHA1 c7a17a008615a73a89ace70bd08855adc145b43e
SHA512 4f4d51d639021bc510eef5e202c1b08ffe2b1931a66549831de30dfafe4fc37a2fefcab5593100c18d116020fd0e0d87ff015df7a90e43261c221fa3927f2542
SSDEEP 96:xHlwRTUKPqGqEf3S2ObzSkSSlSdv9jrnHRWR3FlejySZ7Bw88SF9Ydz8L4cniDj9:0nCREf3S2mSSW8R1TStBw88uYdt
TLSH
T1B912FC3C5004CB2F64B6367CAC6489716AB2063BBBBF68D354B954C50558F3841FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 d02c0457fd06214927fbf246ff1fe17faca2ae32c20a16675cc0b451463c9e68
MD5 a722523f8d890766e3fc09a450fb5150
SHA1 7cf732fd8327ea13a263c71740ac867961321eec
SHA512 daae7007e2e8d07c98d7a32c7ce73d5508bfc3d85b0e2268f22f632eb7495347820c1622c334cfe7b7b76d2659d5f67ef2472c271e65c1e162065372bd1f91b5
TLSH
T1D831D843AA0F76B12908A00694D777A882F47097962A5C54C01C49334E6CB5B73EE38B
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 e2c5216c8d569c839f0abcf06bd199cc5d4346e07a1e56d613a1558cbe8b64b8
MD5 8573dc52a34469efddf881386154e39f
SHA1 990f7da50ca3412f288507eed4c3d4f57acf13fa
SHA512 c18bb51df428323b244133c98d1ac615b2f555c5617855a6dac46edc760db6a251a8662e10a07c26a46dd35126529fc06209dcc52db1e29dad1dfbb3776c25c1
TLSH
T10931B843AE0F75712908A00694D777B882F47097952A5C54C45C49334EACA5B73EE39B
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 605b3efb0541c30c935170f63cdbe8f254a8b66548963a35263146dccebf86c9
MD5 7c079fd724e0633a140a1da53c1381d3
SHA1 40bddae4783c7a7e476258df448da7ce38f3404c
SHA512 59439ba833c9b3adde53a62d81e9992f29b4ff2e971ed9e06003c2f016422f4e6c0dbc39187bb13ef2e76ab96d6f53b51f7ec944ab1464aaa84250503b7eb12c
TLSH
T1EF21DA81AC6B0CF93E54E18BB0CA9BE8EB29502B420C44F0D4449C0016DC5063FEE24A
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 7554b6c2cd8d8f26242f123a89a1751dbdf6288705d472d5e962d119726b88e6
MD5 d32a9e66ddf97a5617e2329d7c37b99e
SHA1 69101ec5df573353813b9940cc8e073ea8e94463
SHA512 10a22ba70c8ce1918308ad9f7198bc0b7b6320466fafe97ab9c988a3f2aac5cef2a07aec79d2ffd7d77c9ff5359d87beb750f9fd4011fa20295274eb8d98af96
TLSH
T13D21B4C1BE0B35703A08D00684D77BBDC2B9B027851B18E4D21C0A111A9CB7A678DB87
MD5 SHA1 SHA512 TLSH

Submit Download