084f19d3a517de348fe9c9ea51edf1a2567b0e1f022f5615f519f4e2487665f7

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 06:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-26_cd41f97f108457e8f2ef7f403f01ea40_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe
Size 392KB
Sample261027-hatb6aa12s
SHA256 084f19d3a517de348fe9c9ea51edf1a2567b0e1f022f5615f519f4e2487665f7
MD5 cd41f97f108457e8f2ef7f403f01ea40
SHA1 c8edd3640d7603ae49f06d823bea688154c26318
SHA512 8df7faf4fa26b0bf5cff6e6277514deee85b2119162a0fec2f89b6cc1c91cef83607da4e39dafb7057f2cc697d8008598d560c00116f2ef48fdfed30347aeada
SSDEEP 6144:kwdU+jQ2/y8MUnT2jiN1Z9m0E9ofJwZ5PveXDsBRHJeqE:kwh3y8MU42Tm0E9ofcZWzwHJev
TLSH
T16984AF55F3D500FAE16BC17889424516FA72BC164B60A6DF37A42E9A3F23BD09E3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

persistence

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000\Control Panel\International\Geo\Nation	2026-10-26_cd41f97f108457e8f2ef7f403f01ea40_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 18 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	5000	firefox.exe
Token: SeDebugPrivilege	5000	firefox.exe
Token: SeDebugPrivilege	5000	firefox.exe
Token: SeDebugPrivilege	5000	firefox.exe
Token: SeDebugPrivilege	5000	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
5000	firefox.exe
5000	firefox.exe
5000	firefox.exe
5000	firefox.exe
5000	firefox.exe
5000	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5000	firefox.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4920 wrote to memory of 4532	4920	2026-10-26_cd41f97f108457e8f2ef7f403f01ea40_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe	84
PID 4532 wrote to memory of 5000	4532	firefox.exe	86
PID 4532 wrote to memory of 5000	4532	firefox.exe	86
PID 5000 wrote to memory of 3276	5000	firefox.exe	87
PID 5000 wrote to memory of 3276	5000	firefox.exe	87
PID 5000 wrote to memory of 3276	5000	firefox.exe	87
PID 5000 wrote to memory of 2308	5000	firefox.exe	88
PID 5000 wrote to memory of 2308	5000	firefox.exe	88
PID 5000 wrote to memory of 2308	5000	firefox.exe	88
PID 5000 wrote to memory of 2308	5000	firefox.exe	88
PID 5000 wrote to memory of 3948	5000	firefox.exe	89
PID 5000 wrote to memory of 3948	5000	firefox.exe	89
PID 5000 wrote to memory of 3948	5000	firefox.exe	89
PID 5000 wrote to memory of 3948	5000	firefox.exe	89
PID 5000 wrote to memory of 2204	5000	firefox.exe	90
PID 5000 wrote to memory of 2204	5000	firefox.exe	90
PID 5000 wrote to memory of 2204	5000	firefox.exe	90
PID 5000 wrote to memory of 3580	5000	firefox.exe	91
PID 5000 wrote to memory of 3580	5000	firefox.exe	91
PID 5000 wrote to memory of 3580	5000	firefox.exe	91
PID 5000 wrote to memory of 3580	5000	firefox.exe	91
PID 5000 wrote to memory of 5232	5000	firefox.exe	92
PID 5000 wrote to memory of 5232	5000	firefox.exe	92
PID 5000 wrote to memory of 5232	5000	firefox.exe	92
PID 5000 wrote to memory of 5232	5000	firefox.exe	92
PID 5000 wrote to memory of 5332	5000	firefox.exe	93
PID 5000 wrote to memory of 5332	5000	firefox.exe	93
PID 5000 wrote to memory of 5332	5000	firefox.exe	93
PID 5000 wrote to memory of 5332	5000	firefox.exe	93
PID 5000 wrote to memory of 5340	5000	firefox.exe	94
PID 5000 wrote to memory of 5340	5000	firefox.exe	94
PID 5000 wrote to memory of 5340	5000	firefox.exe	94
PID 5000 wrote to memory of 5340	5000	firefox.exe	94
PID 5000 wrote to memory of 5352	5000	firefox.exe	95
PID 5000 wrote to memory of 5352	5000	firefox.exe	95
PID 5000 wrote to memory of 5352	5000	firefox.exe	95
PID 5000 wrote to memory of 5352	5000	firefox.exe	95

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\2026-10-26_cd41f97f108457e8f2ef7f403f01ea40_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-26_cd41f97f108457e8f2ef7f403f01ea40_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe"
1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
PID:4920
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4532
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe"
    3⤵
    - Checks processor information in registry
    - Modifies registry class
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:5000
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2000 -prefsLen 27100 -prefMapHandle 2004 -prefMapSize 270279 -ipcHandle 2080 -initialChannelId {e612711e-026e-426f-9222-1f3019b4a735} -parentPid 5000 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5000" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
      4⤵
      PID:3276
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2464 -prefsLen 27136 -prefMapHandle 2468 -prefMapSize 270279 -ipcHandle 2476 -initialChannelId {8c35660a-9ea0-4dfc-8d66-2050ac7c895d} -parentPid 5000 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5000" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
      4⤵
      PID:2308
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3824 -prefsLen 27276 -prefMapHandle 3828 -prefMapSize 270279 -jsInitHandle 3832 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3836 -initialChannelId {637d5a94-2173-4cd3-af17-4049923122d7} -parentPid 5000 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5000" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
      4⤵
      Checks processor information in registry
      PID:3948
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3988 -prefsLen 27276 -prefMapHandle 3992 -prefMapSize 270279 -ipcHandle 4088 -initialChannelId {7bb0d073-0875-444b-9128-37b999d93d13} -parentPid 5000 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5000" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
      4⤵
      PID:2204
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2636 -prefsLen 34775 -prefMapHandle 2668 -prefMapSize 270279 -jsInitHandle 3124 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4400 -initialChannelId {947fb83a-595a-4ed8-9e7e-2a0f389b9a07} -parentPid 5000 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5000" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
      4⤵
      Checks processor information in registry
      PID:3580
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4920 -prefsLen 35012 -prefMapHandle 4924 -prefMapSize 270279 -ipcHandle 4932 -initialChannelId {2f016940-e884-46c3-a308-9d8add35d4a5} -parentPid 5000 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5000" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
      4⤵
      Checks processor information in registry
      PID:5232
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5048 -prefsLen 32952 -prefMapHandle 2728 -prefMapSize 270279 -jsInitHandle 5144 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5152 -initialChannelId {d6ac3ce0-88ff-499e-bc84-287f7b6cfa9e} -parentPid 5000 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5000" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
      4⤵
      Checks processor information in registry
      PID:5332
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5172 -prefsLen 32952 -prefMapHandle 5176 -prefMapSize 270279 -jsInitHandle 5180 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5188 -initialChannelId {652ac640-2f89-4b23-b66a-e8b3f9924a45} -parentPid 5000 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5000" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
      4⤵
      Checks processor information in registry
      PID:5340
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5552 -prefsLen 32952 -prefMapHandle 5556 -prefMapSize 270279 -jsInitHandle 5560 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5568 -initialChannelId {458f840d-6481-4b46-93d8-1959186530ef} -parentPid 5000 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5000" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
      4⤵
      Checks processor information in registry
      PID:5352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\activity-stream.contile.json
Size 4KB
SHA256 110f37f1e766316a627526a9c0241f252ed8c225f636d9afdb804ead730e7870
MD5 559e35ec6eac0f5bed89110b780bdc9d
SHA1 dc1adfefe277f7eb73c1d6162a7246939eda3477
SHA512 a44af65d2dd96781e090d0308eada10c31a7a2eadf09a48afb57cf193c3a2e8e5138075c1eed884714351d0bd33da623678bec78d0e9552f3d6d8b8cb3e4e222
SSDEEP 96:T9bjQMCPbCTmzb1PpFT+mRdCmn4KY7bhydN6DUCholz:ZEMmCTstpEmRdCmihONwUChoF
TLSH
T17E91C86BA57448122B30BAE53C0B3ADDF1077006DEE48B99B15EDC6185EC7FD50DAA88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 bb80ef11bbb7cfbe340b82da3c6b18338a12687760d930c9c551004141c3a7a0
MD5 3a0003ad92ef2e90276d3c268bceb6bf
SHA1 040c1609c4e4a26d426fae379ddbe8b1210c4364
SHA512 71c5ebe9e3f9be14a986fa0e99b58254817c18e5bc2d68be3e2969c60f63d24f15df966ca64a23964e7197bca24eac56e637f71d1c8292dfd3e20c587a36fcc8
SSDEEP 768:wyEKSQsDAKnDcMri+C51DO37hyBKiBNBokL4XZ7obHOOryn+GkLGNwii:rEKJMCa7hEK2IkL4XZ7obPGk5
TLSH
T18C73E9A396E8B1BF0BD037C72C0FB95B66F20185E38606C9FCA9C91D819D754133A5AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 0b0f5a4608cc78f7c56b09b40c5de1dc38d782483fe535033f3907bc593057f3
MD5 ec6234fc84cf2922cf1e3f440f6527af
SHA1 444d00a5234e06ddf1f719bc08e4b0ace31e7af6
SHA512 295dda08296ded302f77ff1bd22239cfdff5ec7e4e9ddc05bfcabe09dfe07e35de46455ac989bc3268bf95617489031b4163bb00f5f3284a3a2405f8770b9c79
SSDEEP 768:wywkTnVn4o4FR9JIeF3Y5zvY1wMLlVJb2atQA4YXBx5MbJ+oZS:rwEVwrJrFI5TY1wMRVIwQpsxI+x
TLSH
T1E0730AA3A6B9B1BB0BA13BDF2D0B756F67E54145E34502C9ECEDCA0C90CC254027A5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

26510

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\doomed\26510
Size 258KB
SHA256 155e5e228a37ff53646e728e8612aecb241a4284d6c45c28b55f738728b6597e
MD5 66b93a811c9146c53ddbcdde67736211
SHA1 5f15b29aaba293576e8833bba0e7765d072c0c0b
SHA512 e86827f507e4e97eadac76ba2f58c5f086283165af9e86ea71cae93261b511edf626576e67c3460fcac588bde0612ca9f036d9e85bd52435b051e0ca1f94df2d
SSDEEP 1536:ZYCYPsJ3M8xSPrTlYvkcI9c/4nbLbo5rEXmWTFIKelq0JqGaaK8Ct92ZFZWkM1St:/M8cltcP/4bI5rkmWpR00D2Zj35
TLSH
T16644E6F3D6AC70FB075296DC6C0D72CF62AF8139DB4209DAFC68C148D2C9A65107679A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32266

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\doomed\32266
Size 52B
SHA256 6667fc3a6517fff8bcdfd3d32893a5f19409375c5177b17d85f8a9f865581dbe
MD5 8d41fd7dfa10329049e8916d6f9cc95e
SHA1 bb761bd418c339076a0c8d5ee7917d7eb99ec791
SHA512 f23a24604c3cb391a24d64d5ee1f6fa5e0149e49d6e98ec00f78a6c36f12806beab46460b2469e645fe3590c1b765601179f575f232a0e6a59e55bae7bf2415b
TLSH
T1F890020452918B09D055C2345C5194B80C10390055D003127DDD276614610D74420048
MD5 SHA1 SHA512 TLSH

Submit Download

06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
Size 16KB
SHA256 c79f5fb8f006a2284d9e91002c4886c9b0baada0fa8c97b71acb45b1e57514f8
MD5 827cc6a61554bfc45501fe2dbfc1091f
SHA1 98f26adf233601d7bad6b11efa9feb84081c0478
SHA512 157f56d6cb3af11e708e90c9d1cf386df500c57dc56c46930bd5b7e19b72abee8cb9badde23ce39c09db2fec29ada0f9b0a0922c8d8e3ef5f1d7537f4d3f7e27
SSDEEP 384:HXwIiO024YMWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMA7X+gn:36ZYMWTToXJWTTogB7S/AmVAf+hRM2Oa
TLSH
T1A3728E7D9F413CAC275790E4C8B983558D1CB2A7DFB5C02D269C3E09CA98A5A70F984F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E9338C5CCF1E2FCF149487351399F198A4F9FCD6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
Size 16KB
SHA256 274a44a26e1dc9edf4683de3c12ac0f18411bbceefef2673e1e8d17276d675f2
MD5 53ef5c732c8c6fc1409d2baea98aebb0
SHA1 b69bfec525dc5eb2bfb6d6884d5dc97127c14043
SHA512 b39b5b3d5743140eb193c5612747d613a95ccf386d982effaa26feb76714b33127eaf59bb1b062c956a747294fe96dcd35ab075659881f9d03d6ff82f82a8b75
SSDEEP 384:HGNQiO024YsWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMA6:mDZYsWTToXJWTTogB7S/AmVAf+hRMT
TLSH
T1E6728E7D8F013CAD2B5780E4C8B683598D18B6E7DFF5C06D26883D09C988A6A71F945F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 a738d8c8e7a87f86137a9a638f727e5e816a96f9e6342ca7b52d92557210b023
MD5 949a0c9eefc2bb47f070b735b18349be
SHA1 bd3b3668ae41f5d77e5296b9333e9dd00080b61b
SHA512 644168a0bd39b97a5262619b67971194198be1960021eb358a9d82c8b20de39984ee351cb6da3d8b30b14247696ed004b73d350b831ea95ac035115e1060f8c9
SSDEEP 3072:X3lVHgl9kVaiw8ivT6txYMaIS27HueFEdNWDZA:FV0kBwh7oxoIH7bFEdI2
TLSH
T1A4B3AFF6DBA2CD2965FF94186A82883EFD263410B3E7300DCD27736461C6F786679249
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 fd5281234185bbca54e922e3c58d68c32e8415b34711b65d395640145eafba73
MD5 a8b7d3fedcfc411e2469944d6a484a3e
SHA1 82b4a41bd6c64c18f857510699d44a539d02b7fa
SHA512 8c8fe2250bd09c4f89dec24dc7e1f62af86c99a1069bda79f6880a53c8685089146c11ab56a27da93cc39686040eaa0a3e179449884571a8c48cefbe0645b3e1
SSDEEP 3072:j3lVHgl9I/PGOvT6txYMaIS27HueFEdNWDZ3:pV0I337oxoIH7bFEdIl
TLSH
T1CBB3AFF6DBA28D7965FF90186A92883EFD263400B3E7300DCD67736061C6F786679249
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UWYGVXWEGM2PYPC8TXE3.temp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\UWYGVXWEGM2PYPC8TXE3.temp
Size 5KB
SHA256 ab3ec0f5067fe998cfec5f5270bc56b34f544248bb31f0bc1d0395e8280b8a90
MD5 63b470d8439d3e002e6e256fafc94f3c
SHA1 e2894441b8aa3966e9258f70c2ef0c80d53913a1
SHA512 122f2d8cf30058cdabaccb8801b3aae727c71b1c666ce61f838b6bc338981416f39d6557c7da656c4ae7a4a9b1635ab70cdea8bef4574ef1bcfc94898d776bb0
SSDEEP 48:VSdU9J5Ugdwf3zdhdU9J/6BdwfxdLdU9J/adwfTk:jPsGP/HiP/3w
TLSH
T19DB1BD014BF70996F4F396723631BB4353B7FD01465B922EC2C66A88093376045AEFA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\addonStartup.json.lz4
Size 4KB
SHA256 5616fd15fac832c73ab8c794d61bdb0a1097fc47990cc152047ffb8b2b08ae78
MD5 726ecc50f870dda2d765385e3485bb63
SHA1 906324c02fc9a84aa0cefaf99fbf9f3cef36ac59
SHA512 d39b5285a3a1e042f6137336d4b37bc1066a97e8749baaa0089b87c6bb99694510dea5f5b060a41d2b87f0479403d155fc752ffc29921ab5bd8893907a99aebd
SSDEEP 96:NYi84sHNw6M2xWGhD41MgGvmHhF7UpO1LnOYvhQhIRhN:Nn52xxhD8rGvmUpwnHUuhN
TLSH
T1B5A17D7AD541EFA1FD32C04358E97FB2E6AAAB3410B8C4E4F1AE72294D64D735704340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.bin
Size 7KB
SHA256 e7cfb388aeba3c0755b6ae57b625396ec5c89d72dda3ffe0383e940930f7430f
MD5 e660a29f6063495a14eb56b5f30ff5a0
SHA1 923bc5ff92990ad11e246a6f98791cd3d74fae21
SHA512 82d79a4cd06e8c204b08979a473576dd789b8b387f16bf6c16df765d4232847e70af470c94a1dbe5eebb16914f6eeacbbbb53058073ea9166644e252cf1e5803
SSDEEP 192:LU1d66JozGzgCl6mc0dXOv5zboPOHlyjsM:Kd66JozGzgC1jmbomHlyj
TLSH
T105E10F64E628463FC408027BDCA61F410F3A389BD88E7F1975AD65182C5B3DD768E1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.bin
Size 7KB
SHA256 102e75f7501c620fdabddd9a9a98e904fc4bf017d307cbe050398c84e5c765d6
MD5 d7324ad17716dcb8579e5945e2600817
SHA1 93f4f261e064b19395c4a2e0ea79521688bf9648
SHA512 9d62f3c701f2e6f95231747ef86017b97e62a778d58cb75d30c396dd9e32bb8ee8ff15acdee85b424494a4a2623486c55ef1ed5848741a2aa07db76ebba95078
SSDEEP 192:wU1d66JozGzgCl6mc0dXOv5zboPFHlyjsMN:nd66JozGzgC1jmbotHlyjv
TLSH
T1B2E10F64E6284A3FC408027BDCA61F410F3A389BD88E7F1975AD65182C5B2DD768E1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 40a3061f51a57ad4fbb1bd6261f5246449c70321d420e58cfa3a6b434b8f1135
MD5 ee9c35a146ee862e6d9214ac71993a02
SHA1 fd4475877fa1e6f337c6c9f66c9ef81bf07e3831
SHA512 9099db5f750267f5b34da6c0c5bf27e6356ef5211e39c394d5eb9788229564d4dce553fc72915297038cf052c8a5ed289b6cf8dbfecdcc9e1db9c601b48cc94e
SSDEEP 192:VOv5zboPrZHlyjsMDU1d66JozGzgCl6mc0dz:KboDZHlyjwd66JozGzgC1jd
TLSH
T126E10068E6284A3FC408037BDCA61F410F39389BD88E7F1975AD65182C5B2DD768E17D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 2061d70dbbd95dfbe0aaf89d3d4ef07e8598c1b41b110cf18f0c667b864cddd5
MD5 de62caa5731d02d65cf2790e67df9581
SHA1 cceb020205ba0ec5438b1cca5c2653b4b2380b9b
SHA512 2bcc73f5a17b13dd6fa268996d3c0218aeedd888d33510d00c3f65d5f848ccf250dd4bff9b4cfa2097438c173bb1478c6f3652b057f255d179a05a841cfa84f2
TLSH
T15D61CB58F2299A3FD044413ACC961F401F303452A8AF7F2A35ACA14D1E1B3CE768D47E
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\events\events
Size 1KB
SHA256 d06ef46eafa114d39523b487fda5661bee4e1ce024d38b04539fe7c46b3b28c6
MD5 98337c253c48e870632e0c4fecc409f7
SHA1 46e42084295f0d132f9d27986b5457ba76fb5707
SHA512 5181aada229141d642e7a55503f75479fb2bb1f549e2c109cfe77fc163d13cdcad50d821c174b9293b19ce8e16c3d97d966c0c6fec7d67a4f68728042674ffd8
TLSH
T1FD219E4C39B84DAA68C7E6BD754101CE97E98E0B05871C430D02DF8CCDD1AE932AE43D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\events\events
Size 2KB
SHA256 151f10a5adaf0e99c27ff4ee7a1d48f8c754c8265eacce90815e9ce570473e01
MD5 9d61ff112d79637975451e99b05b032b
SHA1 8698ec8ef8f9957e1cca1ca6460353bbdb1b85f6
SHA512 d0e23cf233d4864ea9054e5eea91eda66b9a7f39bb92c8985e0306c54361f04d2b64f1061ce6215cf49f9ebe5714b35304311a1975b36b8ed2b7e016fa834d6c
TLSH
T16241D00C26A94D7A6887E7EDF805018D9BD95A0654D31D870DC7DE4CCC93AA9329F43D
MD5 SHA1 SHA512 TLSH

Submit Download

28aac82a-d30b-4d87-b90d-66735a5e1074

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\28aac82a-d30b-4d87-b90d-66735a5e1074
Size 2KB
SHA256 bed0ae80aee14fa9bcfbd287bcc93132d02e76b06bf1240b2b184cb2e2493d35
MD5 f3ad49af65be6cd28cdb8a5e49c6f068
SHA1 ebbb58ee94899a18064b8a86565dfc2705c869eb
SHA512 cecf9a427e1555ee81477e5f28b0125c9be1bda71660ca1c44293d924355f54a5674b426aa41f06ec9e2f43af746e967e9d014206667c5304096ddea5ae451a7
TLSH
T1F741445C75B89C379CEAE14DA081334E53744E5340C16C836F91DF0CCDA675923AA927
MD5 SHA1 SHA512 TLSH

Submit Download

652307be-bca9-4de5-b95c-9a6a763d662b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\652307be-bca9-4de5-b95c-9a6a763d662b
Size 235B
SHA256 4368e76da4cfa4e75a77d939c5c51a5b0f15a918e1dd2e21c9098e5d22d0ac76
MD5 829581fba542eac34f0b1b1ba53cb2f5
SHA1 decbf1aab46c162f480f16ec59cc678ec6fc1a97
SHA512 2bd4fa3966bb6817c766a017506afd05390c2ef324f87598e4248db4add4cbb74977ac4eb0e1ed431f2206c113a2395aa7e711fa21630239799e27cf8de78c0f
TLSH
T19ED097C468C82B6D4C041F03B0E028CA30484C331070E810CBA146748DF9AC8111191A
MD5 SHA1 SHA512 TLSH

Submit Download

aeafc52b-a076-4f36-b465-60d38278a376

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\aeafc52b-a076-4f36-b465-60d38278a376
Size 886B
SHA256 1a919a1cd23e5ff25a63e08eb853d027ae561752126b55a45354119e942207ae
MD5 233423427c76a45492bfb63e785047c0
SHA1 e26ec433a0b5ac6adee426b81e1d24d760bfb917
SHA512 3d84f060c8e3512af10888f21635310626d0532cd2e0afb4cba120dc11492774958a21c8a7204c81f110c1ed7b8edcf9a252330cfb84116c199a5fa37b23614c
TLSH
T1BF110041963579B2CC2CD28B95E43B428BF43423D0CA4D147EB45B280CBF61EA35670B
MD5 SHA1 SHA512 TLSH

Submit Download

de61906c-843c-4b09-80da-ab1be9e41549

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\de61906c-843c-4b09-80da-ab1be9e41549
Size 883B
SHA256 5e3a191ae717f6cc6fc286df4a7958400dd10f9b2d309cda6bc78c14dac5d09b
MD5 d25943fea70b9d3c7df1d5f5863d7519
SHA1 9b2c3707ba28886c5e4ef4621a5ec67df8fa02cc
SHA512 3b1f3ceb575c98f1d53cb5d1ddc10dfd67a0a54f9a73afd4546758d67867bd0c2caed8dd85affda310493cfb2de568ac7b05811df2e2a60fd609093320866608
TLSH
T1B4110081D63579B2CD6C924BC8D53B028BF83563C0CA84183EF46B140C7F60E93A664B
MD5 SHA1 SHA512 TLSH

Submit Download

f2e6928e-4cf4-4a58-a855-f6758790c089

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\f2e6928e-4cf4-4a58-a855-f6758790c089
Size 235B
SHA256 b37c2109119327246618a2c5fc0f8103f63413ed66114bce47f5defacd05e26c
MD5 723cba7fdfd0c1eb3e54f82f99114d70
SHA1 14ec6316ed50be14df5a93238f479d8d1c4ef79c
SHA512 b32dd85653bbaf8fb2aeab90a25d4c7eaa3b5c5b3aaa4a3245bf9b3403853adc4b76290c6f189e86bbb65d9c5328baaf450a12c4b2e77df53582585bd144b3cd
TLSH
T1A5D097816898BB1D89180F47F1A069C232868C331464A8909A5149389AF9ED84251806
MD5 SHA1 SHA512 TLSH

Submit Download

f50676f3-288c-4522-b357-4a0e68ad4551

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\f50676f3-288c-4522-b357-4a0e68ad4551
Size 15KB
SHA256 6ff1569fbb82816e1cb98be7efa0aab3d79467413a66339dd88206919d4b59f1
MD5 0c693c452ff9df252369038c36d0770f
SHA1 378aebac1463b0223faf1c0fd4a813963d1e72c9
SHA512 197ea90af98a1ff21e426359e28f83d519a76f13b00955f74073ec47da7b4cd5d72c97a54915ffdceda50bb1015beab711f7e821f81f0fb2d1bc93d50c7736ef
SSDEEP 192:Ii3HZkImlesSrUcjlDrBbTE4+4FWO3VmA0qgPoVEGyX9ABURhzxIZ7sRzlFQ:n35kI0eswxtS4DH8hlIZ7sRQ
TLSH
T15C62D8566470597A8691E368D4FC7FC3E2F618CB4C019FCA9BE47E0869EF06D112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\extension-preferences.json
Size 942B
SHA256 cf91c5fcebee0d71d0d20ec46579b48dac36dac9f7282050c722a145290a6686
MD5 049e3f74f928fcd7fdc29233b7326c88
SHA1 a99947bcaf045b7bdea588d5c76c3407f1ebfcea
SHA512 362cce92211768838d31b556e22e7810357b52caebefacee6ba05228fcc4dccd813bc40a19bded3ac3a8bf886bb7310ea7fd46cce5f599de9891df53813558b6
TLSH
T14311F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\extensions.json
Size 14KB
SHA256 b03b35c68cdc22db5c819f8c505a972e8832d130bc0e034bb0bd71527cb697b3
MD5 a703452cf7b0d35730edf2668d284723
SHA1 fc4b2c23bee560c937481e88471c953b86c7a5c3
SHA512 aa9a306ac7b5033f1bffe9d6d9332a9d077a695985c46f20656530a603a367a9bba8c58c44a17797257bb80017dcf589dfdbd49876b1ef4fe845d67c30ea584c
SSDEEP 384:XkI4vMUmldvS8dhWA94zs96oxL4Hb9L4PdL4HXL4HoL4HC:0I4ERf3Xp486y454V474K4i
TLSH
T12262421545048EB8298FA79BAA367E01C37D473B60845C78F4DD8FC802FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
Size 6KB
SHA256 121fd05ff81ebb61d7814e8455d0d6b77a641827d9437fe242d82864145a38ba
MD5 7fb307092e32667cfa64a1f1bd1b57bb
SHA1 3d18515e152020080862006c9383088fff0e8791
SHA512 e6cc7405d4193063b18b4d85c3972c1c6e456e7f2e1dee66000d75e7058cf70fd8e8f609e4da9a3d16a427d0b635e3f84a3ed0e1db7a73bd5a68849b67672459
SSDEEP 96:xH5UTUGqGqFfwdt1zSH3SSlSdv9jnRn2RHKpBw88D8L4cnEVoR:XBRFfwdtC3SSx9KpBw88FG
TLSH
T143E11E7894488B6F74B637ACAC688C715AB2013BBBBF68D750B554C5011CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
Size 6KB
SHA256 bb78fd8c4254cc3181ebdb7601fcfe9d81d24989864e2d44f4cb456341734095
MD5 edc0fd1671fe08dec9fa1e88dfdf41bb
SHA1 5864fa51626adf560627e9a8ea81161c0e3c2419
SHA512 3f139490a2ba6ceb0ae3a4ef37f695d989d588dd12d9e95c6873b871b43edd6a6f8a4a025634ea70339a86cf5731535fd93af1cef9b356e8bd2e6e529e1ca348
SSDEEP 96:xH5UTUGqGqFfwoQObzSqNSSlSdv9jvwn2RHKpBw88n8L4cnEVoR:XBRFfwoQUNSS69KpBw88ZG
TLSH
T1EFE10E789548CB6F74B6376CAC6888315AB2013BBBBF68D750B554C4011CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
Size 6KB
SHA256 05b48bf9864e57bf729d2e75a2989600921d2cdda7908177c52bdfdb2b1a9edd
MD5 50a22178ae69f9637c261c54147f13f3
SHA1 ba74156b2b29a815ebbd9151a143a5a31bad8996
SHA512 65407106710814828b888643d465fdbf28bf1305fde5f641788ea72d267a3610b68db18cd15f367d99e8f73c0afdb6b8144855159a1e73b5c0dc73470ad29252
SSDEEP 96:xH5UTUGqGqFfwdt1zSAKNSSlSdv9jnRn2RHKpBw88n8L4cnEVoR:XBRFfwdtFKNSSx9KpBw88ZG
TLSH
T16CE11E789548CB6F74B637ACAC6888315AB2013BBBBF68D750B554C4011CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
Size 6KB
SHA256 12c3996adf8a64e216cbf0af62dca52ed16f5fcd229746ed0f1aaa39bd963bb0
MD5 f34459f5acabe936384e229b9c8d8ec6
SHA1 fc6a3c375509972b483459b46b70d8f9a2e66df6
SHA512 3a66a6633bedc2b89b0605c6763277234bfe64aaf35ec98edcee71ad889c428bf2931c62486463b0e01400cda83d8fdbe1df5347815d1cee8545a8f2b90649e5
SSDEEP 96:xH5UTUGqGqFfwoQ1zSqNSSlSdv9jvwn2RHKpBw88n8L4cnEVoR:XBRFfwoQTNSS69KpBw88ZG
TLSH
T1B2E10F789548CB6F74B637ACAC6888315AB2013BB7BF68D650B55485011CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
Size 8KB
SHA256 26ef07882c51cf90d0dabb1d537411531d4f4ba0e9bdba007399a995672cd10a
MD5 0a10e0a759b6fcc6c315384893fdd2e5
SHA1 cf6ae42a24dd4618afececc35212890a1226de9c
SHA512 66322d39dd60914d7c48382b92386007db54e82a66e5b9f072d41f0b7f25bcee39af14f2d8a6b56c2d985587a2d9df38f88e8ef6958db6cfc25ff7f827c1072f
SSDEEP 96:xH51TUGqGqFfAoQObzSqNSSlSdv9jvwn2RWRvJgO3WuBw8810t8L4cnEVoR:XQRFfAoQUNSS68RX3WuBw882G
TLSH
T1C6020C389044CB6F74B636BCAC6449305AB6013BBBBF68D754B994C5010CF3841F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

search.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\search.json.mozlz4
Size 327B
SHA256 a4c8d0344cbf6e230cecbc4d989de36ec075cd8eda7ae740242e1b05b5dd3fd4
MD5 240589068f063f8f706378168230e975
SHA1 9531374a22dea374d032f7484567fb1b201af87d
SHA512 6d04629da44769a64b8808d198f3b3ba6388a0cd5441269e35ca39e7595c4e9abd32618f76ff60b79df80732838ee2a67455e195a801a67334a592b6b6240da5
TLSH
T169E07D3E9C15A0B6C2AC0AC35F0F494A0F58583A9324AC8C90B49D91557FF9B5248E2B
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 467235b17ec76fe21bfe4ec3efa6bda0eac9781fd5a062c07751f9ef4159ecfa
MD5 3740a83197525bb65ab4ec967c828f0b
SHA1 fbb33eb36b1c2f34223544807a977aab86faf785
SHA512 88908d404a5b018bb0f5e1f39d1c7e5ddc2d3adbfefc57737571f0b3e7473e8d11c3e3374b169fd3a27db8eff7b1659a6b11592348348932b1b482c8f15f5af7
TLSH
T14C2181C9BB2E6CB27660818A80C92AE6C75850924A2CA5A1C95F66021D8C957728F70A
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.0MB
SHA256 3e1d9f68e703a1bd993fb31a516058ff5e21d29f6d89114d38a1a21fce75fa22
MD5 5e20eee60898ea27026dbb96a026dbbf
SHA1 c99f67e0521d86d2bdd4e65af927d6405351ec90
SHA512 8626798ddfe5ea45a18b683c9d658c08ab3c0658736c38881eea5d072097468cebdbc1d3363d2ff72024fa7db8075524df4003ef193f35161761dc3c2d3463b7
SSDEEP 24576:6qJRamMRlze7GfDXY28Ym3VUeTDMtb5ca9uBQVvqIoIjWtR+qCottKT:6qS1Q0DXYjgKGeQYxI6tRtCotto
TLSH
T1A9362AF820D1A257F3414033664593EF21EFD00C6027DA085BE99AE9A574CEF9E16B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.5MB
SHA256 15eda57dbf560af39417bd6c237ebd5a04bc47c30f21794eeb5c552ac13d8596
MD5 1d2242f7707fe5b73ff5c98e58b992ce
SHA1 08581f925c97687f26f022a6a5af6b32a37678fb
SHA512 77386126e45c704158d8515a6b2c9bf2f316f3b0332c678776ab5729d6d0aaa719b300699934790b9da0d30f00cdcc7710bec25bf6b257ea974233744af86c6d
SSDEEP 49152:2eCBWkWKV2B5O8D2D3/YR70dDTl3xWob0U0QwmCNpSkM3EPgR2zlJ+pOKd+3RK3l:AvMjGIqYarC1HIq4
TLSH
T15B865BE420E19253F38640B3719993EB21EFC01C6036CF48579496FAA9748EB8E577BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

targeting.snapshot.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\targeting.snapshot.json
Size 3KB
SHA256 c7ee0faa7294a7ce5ba6dc4b80e2defe31558b1a506350ccbfa820fbdbb9a092
MD5 e16cba8ad79b95df2a5e34a98c85bd3f
SHA1 56ae76b2201baf596426ee12aaeb7fce0cd06c0d
SHA512 59624f0b63ff1354a8d3db3b288b3f64ef2ece916e2cc20fef3fa069687e240097f109422734f2bda98fe2498b42131fc10cfe88704d2299e5b47183840bf365
TLSH
T11371810CA61CA4BEA66BC3C0D6447F978BBD053370406458DAFE460C45FB5FB122621B
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads