Overview

overview

8

Static

static

3

LunarM_[un...]_.exe

windows10-2004-x64

8

LunarM_[un...]_.exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    701s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    11/10/2026, 13:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    LunarM_[unknowncheats.me]_.exe
  • Size 641KB
  • Sample261011-qcewjsac36
  • SHA256 49338b53ff575a1598c546c934e70efd8359f9b8804f0bd6692720881dab67d9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarepersistenceransomwarespyware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 33 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 36 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 42 IoCs
  • Suspicious use of FindShellTrayWindow 58 IoCs
  • Suspicious use of SendNotifyMessage 43 IoCs
  • Suspicious use of SetWindowsHookEx 13 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\LunarM_[unknowncheats.me]_.exe
    "C:\Users\Admin\AppData\Local\Temp\LunarM_[unknowncheats.me]_.exe"
    1⤵
      PID:1072
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:1236
      • C:\Program Files\Mozilla Firefox\private_browsing.exe
        "C:\Program Files\Mozilla Firefox\private_browsing.exe"
        1⤵
        • Suspicious use of WriteProcessMemory
        PID:5332
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -private-window
          2⤵
          • Suspicious use of WriteProcessMemory
          PID:3520
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -private-window
            3⤵
            • Checks processor information in registry
            • Modifies registry class
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:1876
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1928 -prefsLen 27097 -prefMapHandle 1940 -prefMapSize 270279 -ipcHandle 2024 -initialChannelId {082983a5-3a62-4d88-ab3a-0de3baee0cfd} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
              4⤵
                PID:3552
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2416 -prefsLen 27133 -prefMapHandle 2420 -prefMapSize 270279 -ipcHandle 2428 -initialChannelId {8a6e3f1a-5e91-4522-ae05-f3d6a1e2459a} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
                4⤵
                  PID:4456
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3780 -prefsLen 27198 -prefMapHandle 3764 -prefMapSize 270279 -jsInitHandle 3784 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3796 -initialChannelId {db44e2f6-efe0-4a1f-a6c8-6b7e55d48767} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
                  4⤵
                  • Checks processor information in registry
                  PID:4692
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3944 -prefsLen 27198 -prefMapHandle 3948 -prefMapSize 270279 -ipcHandle 4024 -initialChannelId {8b33ed5e-362a-4abc-b7d2-ac1b682393df} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
                  4⤵
                    PID:5840
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4584 -prefsLen 34753 -prefMapHandle 4588 -prefMapSize 270279 -jsInitHandle 4592 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4600 -initialChannelId {51d510a8-5fc4-4789-9aa3-97931d529ad9} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                    4⤵
                    • Checks processor information in registry
                    PID:1244
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5132 -prefsLen 34802 -prefMapHandle 5136 -prefMapSize 270279 -ipcHandle 5148 -initialChannelId {e03ac696-0db7-4edc-84c5-5f68735338fb} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                    4⤵
                    • Checks processor information in registry
                    PID:2492
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5632 -prefsLen 32924 -prefMapHandle 5636 -prefMapSize 270279 -jsInitHandle 5640 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3040 -initialChannelId {62f7a71f-ed0b-4fab-8c15-b6ef0a63cdde} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                    4⤵
                    • Checks processor information in registry
                    PID:1624
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5656 -prefsLen 32924 -prefMapHandle 5660 -prefMapSize 270279 -jsInitHandle 5664 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5672 -initialChannelId {87c7cba7-eba6-4881-bcac-0436b8888e78} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                    4⤵
                    • Checks processor information in registry
                    PID:2088
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5804 -prefsLen 32924 -prefMapHandle 5816 -prefMapSize 270279 -jsInitHandle 5632 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4952 -initialChannelId {1f65fd10-6c09-40e0-8f78-f448b92fd1b9} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                    4⤵
                    • Checks processor information in registry
                    PID:3044
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6396 -prefsLen 36857 -prefMapHandle 6400 -prefMapSize 270279 -jsInitHandle 6404 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4804 -initialChannelId {a02c5e80-e7cf-4a3c-8562-4018e2df09c2} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
                    4⤵
                    • Checks processor information in registry
                    PID:1528
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6672 -prefsLen 36857 -prefMapHandle 6676 -prefMapSize 270279 -jsInitHandle 6680 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6384 -initialChannelId {21d181a6-884a-46e0-9f5a-d5f7abd95bd9} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
                    4⤵
                    • Checks processor information in registry
                    PID:5548
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6888 -prefsLen 36857 -prefMapHandle 6856 -prefMapSize 270279 -jsInitHandle 6860 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6796 -initialChannelId {4f6a2f69-e60d-4a37-9401-87382eb76540} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
                    4⤵
                    • Checks processor information in registry
                    PID:5816
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7100 -prefsLen 36857 -prefMapHandle 7072 -prefMapSize 270279 -jsInitHandle 7076 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7108 -initialChannelId {53f06e7c-eb53-4980-a884-cdabd1bf3fe8} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
                    4⤵
                    • Checks processor information in registry
                    PID:1712
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7088 -prefsLen 36857 -prefMapHandle 7092 -prefMapSize 270279 -jsInitHandle 7204 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7232 -initialChannelId {3886b8eb-ef52-4948-8d71-4d4223d79478} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
                    4⤵
                    • Checks processor information in registry
                    PID:1376
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7536 -prefsLen 36857 -prefMapHandle 7540 -prefMapSize 270279 -jsInitHandle 7544 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7516 -initialChannelId {9d417757-12a4-4d19-9575-259872951fd9} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
                    4⤵
                    • Checks processor information in registry
                    PID:4292
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6148 -prefsLen 36857 -prefMapHandle 6132 -prefMapSize 270279 -jsInitHandle 6136 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6124 -initialChannelId {3479cbc2-8b77-49a8-be30-363077a67844} -parentPid 1876 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1876" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
                    4⤵
                    • Checks processor information in registry
                    PID:1700
            • C:\Windows\system32\svchost.exe
              C:\Windows\system32\svchost.exe -k GPSvcGroup
              1⤵
                PID:4700
              • C:\Windows\system32\sihost.exe
                sihost.exe
                1⤵
                • Suspicious use of FindShellTrayWindow
                PID:2300
                • C:\Windows\explorer.exe
                  explorer.exe /LOADSAVEDWINDOWS
                  2⤵
                  • Boot or Logon Autostart Execution: Active Setup
                  • Enumerates connected drives
                  • Checks SCSI registry key(s)
                  • Modifies Internet Explorer settings
                  • Modifies registry class
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious use of AdjustPrivilegeToken
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of SetWindowsHookEx
                  PID:2036
              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                1⤵
                • Modifies registry class
                • Suspicious use of SetWindowsHookEx
                PID:2228
              • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                1⤵
                • Modifies registry class
                • Suspicious use of SetWindowsHookEx
                PID:2108
              • C:\Windows\System32\SecurityHealthHost.exe
                \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                1⤵
                  PID:3580

                Network

                      MITRE ATT&CK Enterprise v16

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      activity-stream.contile.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\activity-stream.contile.json
                      • Size 4KB
                      • SHA256 61c3d554fc87d34edfecd817ea11ab6a577cbbf9223be3e1d1353e502f6f665d
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      activity-stream.discovery_stream.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\activity-stream.discovery_stream.json
                      • Size 75KB
                      • SHA256 0b99a9387e40cc258492d94b324011e0a353002232c6563d087f239e6b1fd975
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      activity-stream.discovery_stream.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\activity-stream.discovery_stream.json
                      • Size 75KB
                      • SHA256 c9031dc8cc61189a54a77107d69960eaef49e166880d8c1b20dcca753bfad6ef
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      activity-stream.personalization.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\activity-stream.personalization.json
                      • Size 1KB
                      • SHA256 30137df6e11011c02f45889c68312924d75d73fca56f37c5ec5c1bffc429f685
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      10536
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\doomed\10536
                      • Size 257KB
                      • SHA256 40dc83f0b707646187438c7f673f488dbe218411035f754845ede1d9902ec1d8
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      11214
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\doomed\11214
                      • Size 257KB
                      • SHA256 86830397c3c55833e3966e2622c762888d8eca14f90a81a246978ccaa245e546
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      12689
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\doomed\12689
                      • Size 52B
                      • SHA256 73a34d8b5ec35902a187fb419b2d6e8f256be20884b257591b54d7f67f4272c3
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      25836
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\doomed\25836
                      • Size 257KB
                      • SHA256 051f64f364146afc1fa596c993f14a5cba39bdb15945fcf338b6845f98264ad8
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      26450
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\doomed\26450
                      • Size 257KB
                      • SHA256 11f37df61fe446ef55242b04bb68dab61ba72f7395457c5b8a123d21dcfb020d
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      6199
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\doomed\6199
                      • Size 257KB
                      • SHA256 c41487518134dfc6ee014dc3c54714cd73b8fa5dc1e64b71bf3f6ecf798a258f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      E9338C5CCF1E2FCF149487351399F198A4F9FCD6
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
                      • Size 16KB
                      • SHA256 aa7cbbb2b7310548e21703f1c3dde894cdc7165b972f9ec99b03f0b750399da3
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_arts_and_entertainment.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
                      • Size 67KB
                      • SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_autos_and_vehicles.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
                      • Size 44KB
                      • SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_beauty_and_fitness.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
                      • Size 33KB
                      • SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_blogging_resources_and_services.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
                      • Size 33KB
                      • SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_books_and_literature.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
                      • Size 67KB
                      • SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_business_and_industrial.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
                      • Size 45KB
                      • SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_computers_and_electronics.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
                      • Size 45KB
                      • SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_finance.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_finance.json
                      • Size 33KB
                      • SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_food_and_drink.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
                      • Size 67KB
                      • SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_games.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_games.json
                      • Size 44KB
                      • SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_health.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_health.json
                      • Size 33KB
                      • SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_hobbies_and_leisure.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
                      • Size 67KB
                      • SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_home_and_garden.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
                      • Size 33KB
                      • SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_internet_and_telecom.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
                      • Size 67KB
                      • SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_jobs_and_education.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
                      • Size 33KB
                      • SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_law_and_government.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
                      • Size 68KB
                      • SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_online_communities.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_online_communities.json
                      • Size 67KB
                      • SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_people_and_society.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
                      • Size 45KB
                      • SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_pets_and_animals.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
                      • Size 44KB
                      • SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_real_estate.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_real_estate.json
                      • Size 67KB
                      • SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_reference.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_reference.json
                      • Size 56KB
                      • SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_science.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_science.json
                      • Size 56KB
                      • SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_shopping.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_shopping.json
                      • Size 67KB
                      • SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_sports.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_sports.json
                      • Size 56KB
                      • SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      nb_model_build_attachment_travel.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\nb_model_build_attachment_travel.json
                      • Size 67KB
                      • SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      recipe_attachment.json
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\personality-provider\recipe_attachment.json
                      • Size 1KB
                      • SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      webext.sc.lz4
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\startupCache\webext.sc.lz4
                      • Size 106KB
                      • SHA256 7b8b6c604f7e10b78df24254d1f12849ca4b646b30772f68f3e1c888d0b2c5e1
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      webext.sc.lz4
                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\startupCache\webext.sc.lz4
                      • Size 105KB
                      • SHA256 de17e6932723aa9011f4067da17ec585057bb1e4a53bef7e189a1c22e4369b5c
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      prep_Activatable Class_Hermes_perf.cache
                      • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                      • Size 603B
                      • SHA256 b346273b0f3e13afaa9f07d97248343c45a667a5e097d1198a449a4de187aebb
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      prep_Activatable Class_Hermes_perf.cache
                      • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                      • Size 607B
                      • SHA256 be6b74e52e5eef1f1c27c0976bf3bf1bfa99958c00bbef2898a602f691be6dae
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      prep_Activatable Class_Hermes_perf.cache
                      • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                      • Size 599B
                      • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      remote-settings-startup-bundle-
                      • Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
                      • Size 572KB
                      • SHA256 a230a16b2640e8a61c9fbd94d8d2ad637fa7493cd913c38e7ca5ebff4421f8a0
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      tmpaddon
                      • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                      • Size 11KB
                      • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      tmpaddon
                      • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                      • Size 21.6MB
                      • SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      tmpaddon
                      • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                      • Size 502KB
                      • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      68HVO5UE4YKS6SQWG4O5.temp
                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\68HVO5UE4YKS6SQWG4O5.temp
                      • Size 5KB
                      • SHA256 2874206680d46d5432843324b6160a3a483e66c208b9aebe8b0c278e442eef1c
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      addonStartup.json.lz4
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\addonStartup.json.lz4
                      • Size 4KB
                      • SHA256 e54b6c84518c13ac966f7361cdf2e49a6eba46ebfc2839c441a8ef5f21d50b1f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      bookmarks-2026-10-11.jsonlz4
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\bookmarkbackups\bookmarks-2026-10-11.jsonlz4
                      • Size 856B
                      • SHA256 b7e7f3f79d4a89c7fa3b685c93f5ed29156fbfba37f6de8fd8bd00e994a4d59a
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      broadcast-listeners.json
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\broadcast-listeners.json
                      • Size 221B
                      • SHA256 a2c67fa99edbfff17cad180d5fc301f2fdd9e14709c3665efcf2c02dfcef1c29
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      store.json.mozlz4
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\crashes\store.json.mozlz4
                      • Size 66B
                      • SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      data.safe.bin
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.bin
                      • Size 131KB
                      • SHA256 72adca4c245d1c19c101a105621ddad47031ba5e156cd4c9677fd5ad2378c73f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      data.safe.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                      • Size 94KB
                      • SHA256 1baf3a4069ca636330d45933507e887583c94e7ad8184847fd5a0f0ca4f8c745
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      data.safe.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                      • Size 7KB
                      • SHA256 82137787402254e2de47f745fc280444ca5709211520d47d1cd1aa1c39a8706e
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      data.safe.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                      • Size 131KB
                      • SHA256 cd24ecca8c22503860756e17b8856e6753d434d263196e47ce217e0d3dd2f469
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      data.safe.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                      • Size 131KB
                      • SHA256 79d1329a51a0e18e1999cf26d94510eea3ac6bb06cc9371985b6b07acbb0f29c
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      data.safe.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
                      • Size 7KB
                      • SHA256 1b3833b4abeea7834d1462e15f8f6c88aafb01f14fac9713e3c2d0d5a3a1d75a
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      events
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\events\events
                      • Size 1KB
                      • SHA256 e7e7a8b6a65422bf48b60c193a504c88977c7994bb5ac15fd9ccd71d31617c71
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      events
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\events\events
                      • Size 2KB
                      • SHA256 b289adfc51a930b5ad42475a3f5114be580b6ea551983566e898c40b4562940f
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      events
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\events\events
                      • Size 4KB
                      • SHA256 113cdce98174f37102973336939dcbfc3daa501ca0797b03aa2af3d229d5c055
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      41522c34-99b2-4403-aba7-bd39a839a1a5
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\41522c34-99b2-4403-aba7-bd39a839a1a5
                      • Size 883B
                      • SHA256 209f650cb75fa2667bf3f182e71b155b2c9f7cc99b45e36edabda3c6e2472492
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      7cdc440c-938c-4a77-a313-e46b07f3786e
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\7cdc440c-938c-4a77-a313-e46b07f3786e
                      • Size 235B
                      • SHA256 43f9ddcaaea8223b6906b83b66fe27516b37ec9ba490053ca9ae76885cc6e2e5
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      80c8e599-7603-4a99-ae21-4335011a7f7c
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\80c8e599-7603-4a99-ae21-4335011a7f7c
                      • Size 16KB
                      • SHA256 67b4534cf9a7a68e3c5dcc7135093352b56e52e099822d4e604dcc37b3500255
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      b9c9355f-7892-4d3f-a6ab-1ac7ef17d852
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\b9c9355f-7892-4d3f-a6ab-1ac7ef17d852
                      • Size 235B
                      • SHA256 a3c87bad67f351a2a5cdb484a918168fb9ec2ea4ecd5514dbcd60ce41919afc2
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      da812404-69e4-4ace-bae1-d51c92787d8a
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\da812404-69e4-4ace-bae1-d51c92787d8a
                      • Size 886B
                      • SHA256 55755ffbcf2be433337d67d628b3b5c86642138b5dc22eb4b6356c0092d10b4a
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      df3393e2-7501-4cf9-804c-a8f2ef1e37aa
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\df3393e2-7501-4cf9-804c-a8f2ef1e37aa
                      • Size 2KB
                      • SHA256 18d08d6427bc2923d11a00b3e3622a2d481f12f2a2607cecbac4351691c2d8a0
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      extension-preferences.json
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\extension-preferences.json
                      • Size 942B
                      • SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      extensions.json
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\extensions.json
                      • Size 14KB
                      • SHA256 87ec1ca454934723f1cf341eacdea73203f06130911d9bae7d7a1b923d06577f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      gmpopenh264.dll
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                      • Size 1.1MB
                      • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      gmpopenh264.info
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                      • Size 116B
                      • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      LICENSE
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
                      • Size 473B
                      • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      manifest.json
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                      • Size 1002B
                      • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      widevinecdm.dll
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                      • Size 21.6MB
                      • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      widevinecdm.dll.sig
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
                      • Size 1KB
                      • SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      prefs-1.js
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs-1.js
                      • Size 8KB
                      • SHA256 8db56339f44724a87debb12ce31a3b076b6e84dac9935a2cea69e46bf44f8dee
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      prefs.js
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
                      • Size 6KB
                      • SHA256 e76b2c58f3bbfcf941b0d6b66e64edfd87b93900542de0489c8c29e0370ae6a2
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      prefs.js
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
                      • Size 12KB
                      • SHA256 bf2ba19e5bf959680277c9aebec39a2ca90b13840eeafe33eeb786f517b5dbcb
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      prefs.js
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
                      • Size 6KB
                      • SHA256 aa9615579d1178da0b14435882aa5683786e50e19911918af583e6c8702eb362
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      prefs.js
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
                      • Size 12KB
                      • SHA256 f3bd370f966a21f0fd327c57505559fcb3e61c36db3a0558e3cf23f65b75e9e7
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      prefs.js
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
                      • Size 6KB
                      • SHA256 e1f00f35d419306f978e3b9a3bae95dd6fea16d415f6e06658fb10e1dd2404cc
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      search.json.mozlz4
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\search.json.mozlz4
                      • Size 350B
                      • SHA256 2a317a8ff64d03538667913a28d8769f7483b207d7949590e83bce951ff9fe4a
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      sessionCheckpoints.json
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionCheckpoints.json
                      • Size 90B
                      • SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      sessionCheckpoints.json
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionCheckpoints.json
                      • Size 53B
                      • SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      recovery.jsonlz4
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                      • Size 911B
                      • SHA256 b341393bf30036fff3fd2e370d45907723b8b04442bc836ca8d7be877992b17a
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      recovery.jsonlz4
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                      • Size 911B
                      • SHA256 733ea3acdeb6f9948eb49c552b5d07fe4b484ff7c0a145fa6d8dd812d20c93c4
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      recovery.jsonlz4
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                      • Size 910B
                      • SHA256 56b453472a7b38a508c07a528bd0c483e9d67e59cbce63038df613956574709f
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      recovery.jsonlz4
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                      • Size 911B
                      • SHA256 6bfe7d6693e7e10f75301c02f5135bc4def3a5128e321638d8173252ab727c40
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      recovery.jsonlz4
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
                      • Size 911B
                      • SHA256 8799e3e24a9937d449c09bee490e12435c4db798a74680b057adcd3c80823e53
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      3870112724rsegmnoittet-es.sqlite
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                      • Size 5.1MB
                      • SHA256 79f482e68b08f96ce85ef89f31ee64f082b45c2293d1e52955cef71410c57715
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      3870112724rsegmnoittet-es.sqlite
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                      • Size 7.6MB
                      • SHA256 d0ff7518d1ca59aee82ea83c64202b6a722a8e71213cd0930fbdb505e34f3fa7
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      targeting.snapshot.json
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\targeting.snapshot.json
                      • Size 3KB
                      • SHA256 e046ab406a4bbf769a9b80083c10a9d6ec3f5331288c6ab1897ae8f9d64026b6
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      xulstore.json
                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\xulstore.json
                      • Size 167B
                      • SHA256 a261f6c4c1f49fbaac01d6d7437da1149f9b03588d54b2fd860fdfe969596115
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      memory/2108-1272-0x0000021780140000-0x0000021780240000-memory.dmp
                      Download

                      memory/2108-1303-0x0000021783B90000-0x0000021783BB0000-memory.dmp
                      Download

                      memory/2108-1285-0x0000021783830000-0x0000021783850000-memory.dmp
                      Download

                      memory/2108-1317-0x0000021784620000-0x0000021784640000-memory.dmp
                      Download

                      memory/2108-1287-0x0000021783D70000-0x0000021783E70000-memory.dmp
                      Download

                      memory/2108-1438-0x0000021799000000-0x000002179979C000-memory.dmp
                      Download