e3725de563711290aef52dd9ae84d814a8e38abd6c29c2105ea96869ba16f194

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 22:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-11-06_cdcb2a965c4953b526f910c99c6b8dea_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe
Size 392KB
Sample261107-2yskbasv5p
SHA256 e3725de563711290aef52dd9ae84d814a8e38abd6c29c2105ea96869ba16f194
MD5 cdcb2a965c4953b526f910c99c6b8dea
SHA1 7cabd6d66cd828a830aa52be61073824ce1e60bc
SHA512 48019af1ec1a1376c524aac8e29a86f4a11103bc3f4a59143aa7b31abe9cc3195ae9ba9612c5245e95c15108fab4bbd74bfdde8f5dbcedc6f6352be1e1e52d07
SSDEEP 6144:Fwd++jQ2/y8MUnT2jiN1Z9m0E9ofJp25PveXDsBRHJeqdR:FwP3y8MU42Tm0E9of6ZWzwHJeo
TLSH
T1D484AF55F3D500FAE16BC17889424516FA72BC164B60A6DF37A42E9A3F23BD09E3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

persistence

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000\Control Panel\International\Geo\Nation	2026-11-06_cdcb2a965c4953b526f910c99c6b8dea_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 18 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	2064	firefox.exe
Token: SeDebugPrivilege	2064	firefox.exe
Token: SeDebugPrivilege	2064	firefox.exe
Token: SeDebugPrivilege	2064	firefox.exe
Token: SeDebugPrivilege	2064	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
2064	firefox.exe
2064	firefox.exe
2064	firefox.exe
2064	firefox.exe
2064	firefox.exe
2064	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2064	firefox.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4664 wrote to memory of 4780	4664	2026-11-06_cdcb2a965c4953b526f910c99c6b8dea_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe	84
PID 4780 wrote to memory of 2064	4780	firefox.exe	86
PID 4780 wrote to memory of 2064	4780	firefox.exe	86
PID 2064 wrote to memory of 1592	2064	firefox.exe	87
PID 2064 wrote to memory of 1592	2064	firefox.exe	87
PID 2064 wrote to memory of 1592	2064	firefox.exe	87
PID 2064 wrote to memory of 5132	2064	firefox.exe	88
PID 2064 wrote to memory of 5132	2064	firefox.exe	88
PID 2064 wrote to memory of 5132	2064	firefox.exe	88
PID 2064 wrote to memory of 5132	2064	firefox.exe	88
PID 2064 wrote to memory of 2836	2064	firefox.exe	90
PID 2064 wrote to memory of 2836	2064	firefox.exe	90
PID 2064 wrote to memory of 2836	2064	firefox.exe	90
PID 2064 wrote to memory of 2836	2064	firefox.exe	90
PID 2064 wrote to memory of 2384	2064	firefox.exe	91
PID 2064 wrote to memory of 2384	2064	firefox.exe	91
PID 2064 wrote to memory of 2384	2064	firefox.exe	91
PID 2064 wrote to memory of 3068	2064	firefox.exe	92
PID 2064 wrote to memory of 3068	2064	firefox.exe	92
PID 2064 wrote to memory of 3068	2064	firefox.exe	92
PID 2064 wrote to memory of 3068	2064	firefox.exe	92
PID 2064 wrote to memory of 4888	2064	firefox.exe	93
PID 2064 wrote to memory of 4888	2064	firefox.exe	93
PID 2064 wrote to memory of 4888	2064	firefox.exe	93
PID 2064 wrote to memory of 4888	2064	firefox.exe	93
PID 2064 wrote to memory of 3788	2064	firefox.exe	94
PID 2064 wrote to memory of 3788	2064	firefox.exe	94
PID 2064 wrote to memory of 3788	2064	firefox.exe	94
PID 2064 wrote to memory of 3788	2064	firefox.exe	94
PID 2064 wrote to memory of 4072	2064	firefox.exe	95
PID 2064 wrote to memory of 4072	2064	firefox.exe	95
PID 2064 wrote to memory of 4072	2064	firefox.exe	95
PID 2064 wrote to memory of 4072	2064	firefox.exe	95
PID 2064 wrote to memory of 4000	2064	firefox.exe	96
PID 2064 wrote to memory of 4000	2064	firefox.exe	96
PID 2064 wrote to memory of 4000	2064	firefox.exe	96
PID 2064 wrote to memory of 4000	2064	firefox.exe	96

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\2026-11-06_cdcb2a965c4953b526f910c99c6b8dea_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-06_cdcb2a965c4953b526f910c99c6b8dea_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe"
1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
PID:4664
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4780
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe"
    3⤵
    - Checks processor information in registry
    - Modifies registry class
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:2064
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2004 -prefsLen 27099 -prefMapHandle 2008 -prefMapSize 270279 -ipcHandle 2080 -initialChannelId {308f4f8f-f81b-4ad0-b9bf-a537cc47cef7} -parentPid 2064 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2064" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
      4⤵
      PID:1592
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2460 -prefsLen 27135 -prefMapHandle 2464 -prefMapSize 270279 -ipcHandle 2472 -initialChannelId {c6e87433-4692-4e52-944d-1fa89a6622f8} -parentPid 2064 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2064" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
      4⤵
      PID:5132
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3720 -prefsLen 27276 -prefMapHandle 3724 -prefMapSize 270279 -jsInitHandle 3728 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3736 -initialChannelId {4717ed2a-4779-4881-85a8-a34d7b086b88} -parentPid 2064 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2064" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
      4⤵
      Checks processor information in registry
      PID:2836
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3864 -prefsLen 27276 -prefMapHandle 3892 -prefMapSize 270279 -ipcHandle 3908 -initialChannelId {3e6b0dc3-fac0-43c6-8574-0eb28488f787} -parentPid 2064 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2064" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
      4⤵
      PID:2384
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2604 -prefsLen 34775 -prefMapHandle 4356 -prefMapSize 270279 -jsInitHandle 4360 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4336 -initialChannelId {5c5143f4-00b1-46fd-b75f-329fda2865a7} -parentPid 2064 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2064" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
      4⤵
      Checks processor information in registry
      PID:3068
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 2640 -prefsLen 35012 -prefMapHandle 3012 -prefMapSize 270279 -ipcHandle 4836 -initialChannelId {4e8512f4-e933-4a13-a0d1-d656369c5e4c} -parentPid 2064 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2064" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
      4⤵
      Checks processor information in registry
      PID:4888
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1640 -prefsLen 32952 -prefMapHandle 1644 -prefMapSize 270279 -jsInitHandle 5140 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5148 -initialChannelId {80b10ae0-b196-47e6-93ae-80f916fdc87b} -parentPid 2064 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2064" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
      4⤵
      Checks processor information in registry
      PID:3788
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5192 -prefsLen 32952 -prefMapHandle 5196 -prefMapSize 270279 -jsInitHandle 5200 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5208 -initialChannelId {4c508be1-a377-4ddf-8225-ad237afdff31} -parentPid 2064 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2064" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
      4⤵
      Checks processor information in registry
      PID:4072
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5532 -prefsLen 32952 -prefMapHandle 5528 -prefMapSize 270279 -jsInitHandle 5524 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5516 -initialChannelId {f98c9363-f7d8-4149-9a7b-86d3b1b49215} -parentPid 2064 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2064" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
      4⤵
      Checks processor information in registry
      PID:4000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\activity-stream.contile.json
Size 4KB
SHA256 f5c105bc566fbfa9eae03f5bf419949411f5aad5c9a5dfd6c423dac231827f58
MD5 a77f58246878402adfd0bcd8fdc980dc
SHA1 5d53edd890a1043cacb01c116d9b030952540fbe
SHA512 c831b6a4e29cb49d01e5debfcf0bc578b9b3eadd95290792f57c9fb85e48b42b9219cc53b262405336daf337e3fc484837ab70cdc0f03996552e4383981e3166
SSDEEP 96:TWGM+mQnnml9ivvT+mRBNn4KYAn4+L6D4xlz:PM+JnneivymRBN/JLw4xF
TLSH
T14C91C79B89784C571F31BAE16C063688F1477003D9E09FA8F15A9C71C96C7AF80CF659
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\activity-stream.discovery_stream.json
Size 74KB
SHA256 d7799502dcbeee5dad74bfe1c56859fc17ff3fd473dbb875bdc6ff24ab344fd1
MD5 41e1cb29bed1ae89cb2941744414e123
SHA1 3cd061e5805a66ad295cc7b016485b40033685dd
SHA512 2443fa228ddc16afb9632b8eca87bbf0f707e380cfcc4f94ab02dba387c316e4fc450853821c863477244bc9268e09bbb7fee73e778dc0f46f16c08fd62cb24d
SSDEEP 768:7ByM0ABPJhBobSaRthP1Hau8U2LRBUgI1Ck9kmudS8q7zQITiEQvJOMMo:7wMfvhBobhHaD9BsC1C0ITcnP
TLSH
T1DC73F97397A9B1FB1BA427CF1C0F799B62D20195E34905CCE8EECA1C80C9754127A9BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 6e1175e0d7188ee406f7d0905d3e09cddbd502deff2cc8de27b39f8fd78b5647
MD5 f451d13ba82a238ab2828864c309da23
SHA1 02054066928f12f141f3b5b49492109a3ae765ff
SHA512 699f526826fbec0db1f34618f44c4be43049d91ade8f3f5e4399ed92d5305a0ae709918dbcbcf143317366a3d84fd10aaa770be971eb89c796100e1b4665e213
SSDEEP 768:7ByWPvQsDa2gxhb151X6i+kvOiJ4jpi4t+G5CVGmZ2IBOOr9uyCKhTe7dOP:7wWPU/HZrejp7kG0VlZjuyCAudE
TLSH
T184730AE396E8B1FB0B9137C72D0FBA5B56E10185E34606D8ECEDCA1C81CD754123A6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2452

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\cache2\doomed\2452
Size 256KB
SHA256 7673977c63ea9d85e86c895abdb3e0eeb463b7d74676a3979c601a6a96aa3e2e
MD5 a3884b982f7ba2f9d242f80991f2fcb3
SHA1 becae876f0c550d4582667e6143fe865637b9bfe
SHA512 0de074a1735c6e94d28a60b1f4a6bed92c9aade69640a9d7b6d52de3302874fde8397a7a9270487cf78705d8b493895597b719bfc754cfe631d81502a55d2a13
SSDEEP 1536:sYCYPsqOi0G4SPr7Q4QRvkcINtH3z2zXROhLpwCZuei/wZtK8Ct92ZFZWkM1SCuq:CtxjSckabRiNwiuIZi2Zj38
TLSH
T1DB44E8F7D6AC70FB075286DC2C0D72CF72AF4179DB5209DAF8688148C3C9A65107679A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3200

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\cache2\doomed\3200
Size 52B
SHA256 c1b023bd6480f2f9a195bf0e9778e93e6a8eeda70c2da1a9e12cb0560ebb3ce8
MD5 e611cf0a3d8c89f617a93bcf628d19a6
SHA1 33ed6da30c6d9a308185822adaba9243d13590b1
SHA512 be7049ab1f037558d2386d5cfe4c2c1b90a901821f02650856e9dbd78282b22e838e4a63d34de962ca9187d03b4efbbb695961150287fd1c62e9c73c72a1e2b5
TLSH
T10990021486699505E02881718C248AB406103D1045841E3774B50B9115510D34800021
MD5 SHA1 SHA512 TLSH

Submit Download

06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
Size 16KB
SHA256 dff2b9b4b3e1301379c94f40b13f0503759b74dc658a36790ef8f6ecbc21b125
MD5 f139e68246fe74d9d047d13778fbc23c
SHA1 d1a08c6a73dd0c34f712a1bcd1154a47aef64e69
SHA512 488946691612d2e2e2b461d7e6b24e463c23f63430286506033bb9454d97b5fb0719367f0cbf7ba5975ab591cb8a98e34e167cb6448a99569675d99465fe3e13
SSDEEP 384:HXwIiO024YMWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAHYi:36ZYMWTToXJWTTogB7S/AmVAf+hRMkYi
TLSH
T1BC728E7D9F413CAC2767D0E8C8B983558D1CB2A7DFB5C02D159C3D09CA98A6670F984E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 e4d28ddeb7756adc322529f257d5f32b2a23cb519fbd6230b0636d99bed1a00c
MD5 7e43274021d3d46024aea13fd40c02be
SHA1 972d024f5d99a45274f184457daf3c68f4165513
SHA512 fdaea27f25d51ff8e6cfc4d34fa98cc8f6f6765ec631f8dd8f6eb4ebdd4c802648fd224e1fc045237b52b4cdaf0e7893031ad7a5fed87442222419ec9640b222
SSDEEP 1536:jTrliqV/0fq6stclzUrVzMKtqaZe2rKqmhe+FNyfaD6+TmtLxG/hCHkKzNu9Y8aq:j3lftclzGMSq4p0rrILsCHBco68n8/pR
TLSH
T15AA3AEF6DFA28E6D69FF842857C2893EFD26241473A7300DC9632711A1C6BB87675348
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16h2m5ny.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 3a854dbe574c62474c0bb2c6fd28759efb70d5c3e17b1c06456c1a31bfd67ae2
MD5 5fa951e08ccfa26678e44395707e1495
SHA1 7c9b4e0dfe99deb44759630288d48e0525cc67bf
SHA512 cbcc8a76cada6d355d578c5e84bf05c190704da8112a85ed3276de5dd3737103d70831e57750009fcc5bc1d27a47278f12969ef1659e883e415926ae5ff606e1
SSDEEP 1536:XTrliqV/0fq6stclz22Ai4iesSmgW0ypSDmRe+ONBfKD6+TmtLxG/hCHkKzNu9Yw:X3lftclzveZmP99bq7LsCHBco68n8/pb
TLSH
T154B3AEF6DFA28E6D69FF842867C2853EFD26241473A7300DC9632711A1C6BB87675248
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

74UVAPAF9PL9DRZTHZDF.temp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\74UVAPAF9PL9DRZTHZDF.temp
Size 5KB
SHA256 f4cff296d7d03cc3d26c552ad45159bec1f66a0a03c6970ebb4dbfe6c4b5d681
MD5 c097363ca775ac2baf6ff62557f59998
SHA1 ce2b4bc216a9eb592e0e7c8f19af16025f31cf9d
SHA512 c1b7be637372975a3305409f86c06b6e5d2d1abf3c8dd2d16779f810203163c9cdc5697394121c4adbb49197c9b5e1b8dd5331e5e9fb6645e508e2c293afef2f
SSDEEP 48:zsd3YL2zJ5UgdwR/2zUPd3YL2zJ/6BdwR/KURd3YL2zJ/adwR/YJ:bLeMMLe/RYLe/BS
TLSH
T1E7B1BB021BFA0991F5F3963277317B0267B3FD01861B675FC28566890AB276041AEFE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\addonStartup.json.lz4
Size 4KB
SHA256 0caa4ceab735f390e18bd0bff41bb13a1756b2fd16a687d654de79253d6cdd43
MD5 5e15fde1cd4a98a622444324522f3311
SHA1 5036c038d08dbce47ef18db4ffaf6900673682b5
SHA512 b726ba85f85f162ab0512895a8c0cf8ba0d42b3f6384bf87f62244d4dfeafd282adf40198defe80f27adef7c4884539786ba2f8592eceb4d275f2dd081850627
SSDEEP 96:dU55sWNNd2xWNhD4fMgGvmHQ0FVO1u+8TXqYjE2IXR1:dW2xohD4rGvmHA8Ti2a1
TLSH
T113918DB5D949FFA5FE37C08698D97F31D2DA5A7420AD9431F06BB2054CA0BE26786300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\addonStartup.json.lz4
Size 4KB
SHA256 aa7b92f35aaf19200ca00e31f9b77a470a1693a62e106e72803e3a8310d1540f
MD5 af065df346cfdf457bc38f0c96ef73b8
SHA1 35e03d8b0fc9fd7094c679d96f61d0c33aeb90fc
SHA512 d4d392ad716f57d08627e88cda0f6887301e32970b42a6eab9478bb532ab1728558822750523e5d13e4117151811caf9d8cf641d6417f2eda663775a3d903e57
SSDEEP 96:Ne/4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:Nj52xxhD8rGvm6ApwnHUuhN
TLSH
T10CA17D7AD542EFA1FE32C04358D97FB2E6969B7420A9C4D4F1AFB1154C64E735704340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 e1c54eef3ce40461b73d28e6aa00ab34a1d9dd0548f6a6c828a888a19770fd6d
MD5 ae5113b4d34c16fbc8ddcd8c5f9c19f5
SHA1 fead3c5fbba38cb675c8bfbae16cdfea28cf5f3d
SHA512 023b4671df8566025f0c7b557478f6299395ebbaa97e5628680e83c4572484fb70f5ffcca38963e73479e551ced98385e43886e667cd9d1c335943dd95f440be
SSDEEP 192:MoPOv5zbo9ZGv8yjvB+t1d66JozGzgCl6mc0dz:Mogbo9ZGv8yjvGd66JozGzgC1jd
TLSH
T10CE111A4EA29567FC418027BCCB61B404F39389A9C4F3F19719D641C2C972DD7A8D1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 ca55e3c30323526774c83f2a0d9ef9cc943a8cea6d9c0a05d549bbd078eea77b
MD5 a44c99016ccaf26a1310f97f9250d6aa
SHA1 e0311f0635909d45ab4be3e05f5806ab0bda3398
SHA512 2708f01e98ce1f719ddf6b5a7b797c967fdb237802b887b5d1a796f79b230424842ef9023087519ce67853374e85ea7073af258e38bf74ec167c8bd080545854
SSDEEP 192:D1d66JozGzgCl6mc0djoPOv5zboPgGv8yjvB+o:hd66JozGzgC1jxogboIGv8yjvj
TLSH
T125E121A4EA29463FC418027BCCB61B404F39388A9C4F3F19359D64182C972DD7ACD1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 d23ed18b1e8d31e9c539283a11ee6043ee430ee7cb3f24eda327f733049bf124
MD5 9fef4953965df98231a2842a264bec31
SHA1 c254fd29b438aeed4dbfeaf3b36dfb4594ee26d0
SHA512 c60e5cdd6e932fb423286f78574a5a8576e8f4c8b92710b2b3abd4cc279471fa1633f4dcb3f7073b7a3a79933989ea5dab9d9e1a17ad8f3fd54c28158fb7e26c
SSDEEP 192:Y1d66JozGzgCl6mc0daoPOv5zboPQGv8yjvB+o:yd66JozGzgC1jEogbo4Gv8yjvj
TLSH
T106E120A4EA29463FC418027BCCB61B404F39388A9C4F3F19359D64182C972DD7A8D1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 7463377f207a1aa0e936fbc100cbaa67f714831ea579db4fc60946d6a1892128
MD5 768075f2f7dd58f43e6cd5b1dece5a2e
SHA1 91c1e486f7e94bb8ab486d36519ec74c0fe3297b
SHA512 30ae7f6ad3b789446d4c22067297db2d6079b1f00f1a72b896a0feed9537891db651cb2dcf73de9bd1ff393aa312962f0822194e5a2252fa62d4a83c4760e8df
TLSH
T13F619699F629863FE044423ACC975F412F347456A8AF7F2A34ACA04D1E5B2CD768D07E
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\events\events
Size 1KB
SHA256 d3f9e73d3e6c1720c6d1d03a6f0df3df40725e64157c4624ca9ff94bd8672a97
MD5 56c8c92efd9d2bb4e4065714476bb9db
SHA1 b5bd3eedd99c4b52580e5ccc0501e3374f4604df
SHA512 25f4e6bb1bd1492801547697dea7fee2e139fe0cf6217782ab7c1cc1fbb473323b7c84de30b957072a7a112110888a67884de428b42550ab9e5001ba0c58bb20
TLSH
T1CD213D9C3AB94D6AD9CBE69C7941028E63914E1B04871C874D52EF8DCC82AD931AE43D
MD5 SHA1 SHA512 TLSH

Submit Download

2f1dd2f0-c26c-4e25-bb63-8ee325c3fdee

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\pending_pings\2f1dd2f0-c26c-4e25-bb63-8ee325c3fdee
Size 235B
SHA256 8f700c53c316b743ecdbc5caa929995b1a22d97ee3fe9d0b25522f965b5d4f16
MD5 a121fb853b6d17a3c0565697fca38b2c
SHA1 255f85af5e6fe38826a7408617620e1d485e1b06
SHA512 d222b049cc3466107a24af5ced6fd6b345b27fc223a291f1ce414d640a6b8d6ba23891934dfe373efa863b740e668372b86843cb6dd5fda8196e7bfb4fa32f86
TLSH
T1A7D097C1149867ED1C000F07F0A0A9C630848C3318F9A814CE6206789ABCBC8811381A
MD5 SHA1 SHA512 TLSH

Submit Download

7585f6d0-9db2-4a32-b768-86a3e5799887

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\pending_pings\7585f6d0-9db2-4a32-b768-86a3e5799887
Size 15KB
SHA256 fab0b044f079f440b6d402f67bd81f220b5b009a4e7f5c74a876c3835b511200
MD5 6cd9aa200234981cc67a2a378754e0a2
SHA1 696d57ff9ce74e3329c40957eadd1b670bf9f2cf
SHA512 ebffc63fe1217599890ca259526c98084d91bf6027bc2240695dc33c6eab981ee7b5857d663501d83367c2e9318e8d4a198b1eddfebed863ce1844afa425466f
SSDEEP 192:RxzYRSz9qcRpLoC93FrsomNhhQBMobPj1Yf3rw3O8378Y3txEV9kRKF2KUH:DcRSz9qcR5oC93FrYHhQioY3eXQ+9
TLSH
T11F72E9562420597A8691E35994FCBFC3E2F628CF4C419FCE9BE47D085DEE0AE112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a5639b16-d351-41d1-aafd-e915fd04eb48

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\pending_pings\a5639b16-d351-41d1-aafd-e915fd04eb48
Size 886B
SHA256 7bacd514cd73570e7c677d1cbcc537b6eed797a3a0d6363fddccd50cf750d597
MD5 b23198dd30a1616386a213d3b3fb9111
SHA1 1982a2dc0de2e7378117de9bc9b27deb9e0673c8
SHA512 b0362ceb98d5860a33390aefefa8dc2bb71c718af87b4d5fcc57fcc26cb5483f296053c501cbb5edc29fe80a4f173ca03d235256e43205d786cadcdaff91afc4
TLSH
T14911009196B638B2DC78924BD5F5774187B4B12380CA69183DAA4A280CFB51E9367247
MD5 SHA1 SHA512 TLSH

Submit Download

ae4246f6-f553-498e-97ce-5efcf7bfad21

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\pending_pings\ae4246f6-f553-498e-97ce-5efcf7bfad21
Size 235B
SHA256 ec9006f9f908d58c582304a26ae2ff9489e2ba506e009d15436911e405258285
MD5 8d0e2db4625bffdd5805ae5d1510902b
SHA1 efffc3876d5d739d61719983dc4bba53f4b2df57
SHA512 8e8c847593ddaed9dd8efd1006c5a24289b8edb73ff32bffcfce8f61d263c7ec4895223e15aebf7d60b6dd0b99de201d5327d793222eb2f8d6f74231b44c0c5c
TLSH
T1C4D097A014AC2BAC08280F0BF0A0E9D230488C3750787810EAD148B88DBDDCE4262C1A
MD5 SHA1 SHA512 TLSH

Submit Download

cfa38fc9-b538-4f12-91a3-dedd186b3fab

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\pending_pings\cfa38fc9-b538-4f12-91a3-dedd186b3fab
Size 883B
SHA256 8083879721088c4e8786dd54df7b2dd2f92f7a3b18f4586488b753695c1e5171
MD5 4bbab67ba6057340288c4029664b3f2f
SHA1 7ef38042d60a0144871fa376a9446c8dd425ad49
SHA512 cdc6d71f74f927ae677cb88e8ced88c3db557ccf9cc6444890f745c74281c87fc439252b9094a4ea65a105bb8b8071ec367ac88f2bc2e6a9fc6b7e465b89f03c
TLSH
T1C0112391A93638B2CC7C924FC5E537418BF8B52380C799183DA18E180CFE91E83BB247
MD5 SHA1 SHA512 TLSH

Submit Download

e622486c-a3f8-4300-90af-55a98626c91c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\datareporting\glean\pending_pings\e622486c-a3f8-4300-90af-55a98626c91c
Size 2KB
SHA256 29309a5041d8da40a041fd10f7cff8deca327c43d4204cd6037e0d73ac5204dd
MD5 5333eb3bc4b01383e3c6c817fec6c446
SHA1 88a332b18a5c12e378ae1393d5a6808f50d2b15f
SHA512 3901da413e83d2b372a2b5a5b2979bec4fa236307c98c6d72b9ca47f5aca8ab9c3b4b6a62227fe6d45e81cba90b9777cf9fc5a920b9e7794c2c04fc27a589617
TLSH
T1824153AC79B85C779CCAF55DE58223CD43748A4300C22C936E52DE0C8DE679D237A56B
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\extensions.json
Size 14KB
SHA256 0acc10790033cd2500356283104aec1f6fb9d136f03b3a28188ff08122d976c9
MD5 fefa1934a6bc305995a5c0bfeea10c4f
SHA1 7151986a3dd03d2c7a7f79ea6b8d2ab899a21462
SHA512 365ed8a2fb345ed081b5cceda94b1893680cde1be29d42ddd1266739bc4bb848e71a4de42e58de63595ae9d9a914b3ca8ea5839eaba56dd68f54452380f261ab
SSDEEP 384:xkI4vDUmldvmC8dhW294zK96oSL4HgL4PYL4HtL4H7L4HC:CI4bRfuXP4C6v4i4i4N4H4i
TLSH
T13362421545049EB8298EA79BAA36BD01C37D473B60845C78F4DD8FC842FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\prefs-1.js
Size 6KB
SHA256 9c3c0fb399a2fc2e8ad9febed3e99382b4a885cd9fda6a4d050cdd67fa304ef6
MD5 05b19ac281c7105aec4a7ea8f93150fd
SHA1 5d667ae2bcd6fcaefadff8881b28137cedf73857
SHA512 3fa3fac222c53da316d991ee5c4f4418d339c6e44de8f11e34c533a6b3835c14099dade4cf36bddb57020fb16fe3e2b9cfe581bc26e5fc3fd219327d7ed27a9b
SSDEEP 96:xHrJUTUdGLqGq8f3dc11zSSSSlSdv9jRnWHbQW/Bw88n8L4cnuVCLM:RJNGGR8f3dq/SSdbQuBw88jUo
TLSH
T179E13F7894088F6FB4B6776C6C6888716AB2013B77BF68C750BA94C4051CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\prefs.js
Size 6KB
SHA256 c89a64951c2f8685709f4cc16676490ba95aaf304de302dfa395617ef63ee434
MD5 49fa59b3cf6315ce415e962c624e97ae
SHA1 7ea0dcd00861211c519e2184355f0329af4fa9a9
SHA512 a45456211556d65ee935c35516c2e4a13c82c5899a201db89598d02f939394b2ccc88d3e2f9248e3317172b97017056271d454efff8ab7e335eea23fde1e9d63
SSDEEP 96:xHrJUTUdGLqGq8f3Xp1zSqdSSlSdv9jRnWHbQW/Bw88n8L4cnuVCLM:RJNGGR8f3XpPdSSdbQuBw88jUo
TLSH
T118E13E7894088F6F74B6776C6C6888715AB2013B77BF68D750BA54C4011CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\prefs.js
Size 6KB
SHA256 627d4341383008f546ecfc86bd37eee1ebb6fec2416ea3495b0e0785634c710a
MD5 c0ca976d0043eef172561b4e6baf926a
SHA1 0ca1a5b31d3dfe1b2261a8b4a5dcc292fc92103c
SHA512 4c331bb939f520ea6ef3bd854efd8573aa5305e07e5366cb99347c28ebf08d9786b5120971eb27214dd88728a05d25b6cbd41ff6cc80fd2a42b4ce82724c3d34
SSDEEP 96:xHrJUTUdGLqGq8f3dc1ObzSSSSlSdv9j2XnWHbQW/Bw88n8L4cnuVCLM:RJNGGR8f3dqESSFobQuBw88jUo
TLSH
T113E12F7894088F6F74B6776CAC6888716AB2013B77BF68C750BA94C4015CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\prefs.js
Size 8KB
SHA256 21582524f55b5eba51fe8e8be64e6b46c4929fe636ef21e1acf2ab42c5f85b83
MD5 7f2919e33f61cde44d1a20086d6e5bba
SHA1 8f013ea92fc868b35639907fb0aa98a5f6a9e9dd
SHA512 00ef37b9e6e8692e23977fa3ea886bf23b41f092fcf92683951eba09a4f095e6370952baff086b4c1528b24ff510ee7d43aa71f2f18b0a555ec593189d53a143
SSDEEP 96:xHrJ9TUdGLqGq8fVdc1ObzSSSSlSdv9j2XnWWRhHQWZzBw88yH68L4cnuVCLM:RJmGGR8fVdqESSFtRJQ8Bw884cUo
TLSH
T199020E389004CF6FA4B6776DAC6489705A72013BBBBF68C750BA94C5010CF3446EA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16h2m5ny.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 af8809c6b62f31d9aa4c952829b7c70c4c446df5794bf442708fd4925fd24fc0
MD5 270f5e4e1e9c1b86872885a916b69cd6
SHA1 1711d96cda0280efaf090c083d3dbb6c24fd2e08
SHA512 848784646ce6a5c35b3e35951221f1c911b8f187cb2dcbcedaf7f8b3b60bb61d2fa3101e31d5c2fbda661f609f6bd13296aafd3a60d3e1034d6d5a097c11f65f
TLSH
T1E721B782FE2A28FA255D918651C51F94DA94F0804228B8F08D5EB70135C8E1672EF74D
MD5 SHA1 SHA512 TLSH

Submit Download