Analysis

  • max time kernel
    1734s
  • max time network
    1518s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/03/2024, 03:45

General

  • Target
    https://memz-trojan.en.softonic.com/?ex=RAMP-1768.1
  • Sample240326-ea6eyafe5y
Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 5 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 8 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://memz-trojan.en.softonic.com/?ex=RAMP-1768.1"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3144
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://memz-trojan.en.softonic.com/?ex=RAMP-1768.1
      2⤵
      • Checks processor information in registry
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1216
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.0.925606251\1436142159" -parentBuildID 20221007134813 -prefsHandle 1880 -prefMapHandle 1872 -prefsLen 20749 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e7f1d014-98b6-4fe9-8dd6-a3e8a40afc35} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 1980 23509cf7358 gpu
        3⤵
          PID:4360
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.1.475713495\1004820804" -parentBuildID 20221007134813 -prefsHandle 2400 -prefMapHandle 2384 -prefsLen 21565 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {dc693e72-68f2-4961-bd8f-8f91adfae4e8} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 2412 23509bf2858 socket
          3⤵
            PID:4204
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.2.248805885\2005086238" -childID 1 -isForBrowser -prefsHandle 2912 -prefMapHandle 2884 -prefsLen 21603 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3900617a-ab84-4d4f-b3de-204710a579f5} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 3144 2350e0bbe58 tab
            3⤵
              PID:684
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.3.389448005\1923514766" -childID 2 -isForBrowser -prefsHandle 3832 -prefMapHandle 3828 -prefsLen 26066 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3c631e8c-ac96-43d0-a51b-c34656e6e6d2} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 3844 2350caf4758 tab
              3⤵
                PID:1196
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.4.149235456\493152338" -childID 3 -isForBrowser -prefsHandle 4576 -prefMapHandle 4608 -prefsLen 26125 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {96dcddbb-4f4c-4ddd-a8f6-09d5c35a4726} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 4624 2350fc82358 tab
                3⤵
                  PID:3592
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.5.690130036\1258114344" -childID 4 -isForBrowser -prefsHandle 4792 -prefMapHandle 4796 -prefsLen 26125 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {48772fac-2583-44da-be3b-4448eff90792} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 4784 2351017f358 tab
                  3⤵
                    PID:4788
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.6.1958010445\1749493294" -childID 5 -isForBrowser -prefsHandle 5012 -prefMapHandle 5016 -prefsLen 26125 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {638e5d4b-6f4a-4338-a8f7-00bdeac7586f} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 5004 23510180558 tab
                    3⤵
                      PID:4244
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.7.451550228\936205976" -childID 6 -isForBrowser -prefsHandle 4104 -prefMapHandle 4100 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2b49e043-aa41-4d20-b9bc-5186b4295a51} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 6044 23511684058 tab
                      3⤵
                        PID:5316
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.8.1802766286\2078507711" -childID 7 -isForBrowser -prefsHandle 2780 -prefMapHandle 5900 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a45e9a8b-c017-4f0d-a578-69d73e083c79} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 9940 23511683158 tab
                        3⤵
                          PID:4508
                        • C:\Program Files\Mozilla Firefox\firefox.exe
                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.9.754191682\1341128238" -childID 8 -isForBrowser -prefsHandle 9448 -prefMapHandle 9444 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4b8d01e5-d3c6-4d5d-be50-3439da1d23ac} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 9456 2351190df58 tab
                          3⤵
                            PID:1532
                          • C:\Program Files\Mozilla Firefox\firefox.exe
                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.10.1185653773\1649135657" -childID 9 -isForBrowser -prefsHandle 9428 -prefMapHandle 9432 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6b178747-ecbf-4916-8afe-f5be55e87e95} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 9540 2351190e258 tab
                            3⤵
                              PID:3996
                            • C:\Program Files\Mozilla Firefox\firefox.exe
                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.11.2017782351\975566249" -childID 10 -isForBrowser -prefsHandle 9320 -prefMapHandle 9456 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ba52bc84-55a2-4673-8e29-4d1224be678c} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 9212 2351190ee58 tab
                              3⤵
                                PID:4812
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.12.1198816939\1342638604" -childID 11 -isForBrowser -prefsHandle 8952 -prefMapHandle 8956 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {83063e2e-a36b-4694-ac4c-abda8f12dc9c} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 8948 23513441858 tab
                                3⤵
                                  PID:5980
                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.13.352301056\1544142952" -childID 12 -isForBrowser -prefsHandle 8844 -prefMapHandle 8948 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {272ae296-e49c-44a5-b761-faa3f66b3bed} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 8856 23513443c58 tab
                                  3⤵
                                    PID:6164
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.14.1044650445\689044209" -childID 13 -isForBrowser -prefsHandle 8644 -prefMapHandle 8640 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d8b307c9-a523-4dd8-9cf0-f3c74f97ea2e} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 8656 23513154e58 tab
                                    3⤵
                                      PID:6172
                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.15.1390759648\53127415" -childID 14 -isForBrowser -prefsHandle 8644 -prefMapHandle 9180 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3ea69abb-2773-4017-9215-cef2c955fd1c} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 8560 2351393b058 tab
                                      3⤵
                                        PID:6964
                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.16.539186541\1958338462" -childID 15 -isForBrowser -prefsHandle 5392 -prefMapHandle 5384 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d78a3edb-b048-4680-9652-2c43e02a5c76} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 4616 2351328be58 tab
                                        3⤵
                                          PID:5112
                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.17.1662046806\1657249597" -childID 16 -isForBrowser -prefsHandle 9152 -prefMapHandle 4660 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {19799b4a-dc79-4677-a9f7-34aa77756d7b} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 7956 23513006d58 tab
                                          3⤵
                                            PID:6416
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.18.1719823933\905410807" -childID 17 -isForBrowser -prefsHandle 4936 -prefMapHandle 4920 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {cdd75085-c6dc-42d2-8f1e-d3f82fe201a1} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 4948 23513008b58 tab
                                            3⤵
                                              PID:6468
                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.19.681611853\2116753727" -childID 18 -isForBrowser -prefsHandle 4720 -prefMapHandle 4732 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6c5cd764-225d-4273-adc9-d26192c1d182} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 4696 23514624958 tab
                                              3⤵
                                                PID:6944
                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.20.376316664\491897251" -childID 19 -isForBrowser -prefsHandle 4648 -prefMapHandle 4704 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {51bb9e78-296b-4819-a3f3-f43f478968e8} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 9420 23509ff8558 tab
                                                3⤵
                                                  PID:6352
                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.21.921572351\1497210058" -childID 20 -isForBrowser -prefsHandle 1600 -prefMapHandle 4800 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4c2563ff-e700-41e1-bf8b-5494b0bff8ad} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 9852 235117d4558 tab
                                                  3⤵
                                                    PID:6520
                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.22.1533349625\1054370167" -childID 21 -isForBrowser -prefsHandle 5380 -prefMapHandle 8596 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9cc0643e-cc85-4d5a-a951-f82fa01c39fa} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 9840 23514b9d658 tab
                                                    3⤵
                                                      PID:6528
                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.23.1969511774\754673707" -childID 22 -isForBrowser -prefsHandle 9576 -prefMapHandle 9840 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f5173673-5ced-4fa3-bb28-a282e0732083} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 5252 23514b9d358 tab
                                                      3⤵
                                                        PID:6536
                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.24.1783876209\1361086685" -childID 23 -isForBrowser -prefsHandle 8384 -prefMapHandle 7960 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {460f0e6e-25a2-4797-80c1-5dc00e0da590} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 8964 2350edc0f58 tab
                                                        3⤵
                                                          PID:1164
                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.25.916549068\1726326935" -childID 24 -isForBrowser -prefsHandle 7996 -prefMapHandle 8000 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b68260f7-0aeb-43a9-a9e0-3cdc07bd44e5} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 7992 2350edbf758 tab
                                                          3⤵
                                                            PID:5180
                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.26.709510766\1366446377" -childID 25 -isForBrowser -prefsHandle 8292 -prefMapHandle 8052 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {41c959bd-e2cd-4cac-ba98-4c304991e6e8} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 2912 2350e06be58 tab
                                                            3⤵
                                                              PID:5584
                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.27.675086937\664880224" -childID 26 -isForBrowser -prefsHandle 1116 -prefMapHandle 3996 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {94966d56-d9f8-4ba1-bd4b-7bfea057f045} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 3168 23513189f58 tab
                                                              3⤵
                                                                PID:6760
                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.28.203746510\1951534721" -childID 27 -isForBrowser -prefsHandle 5272 -prefMapHandle 9420 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b0a7b838-9ba5-4803-8825-138c60988476} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 9680 2351319e758 tab
                                                                3⤵
                                                                  PID:6228
                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.29.1518496691\1125460336" -childID 28 -isForBrowser -prefsHandle 9464 -prefMapHandle 9784 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f86c90c9-fb4e-411b-b582-3a9f5f4b11d7} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 8064 235131a0858 tab
                                                                  3⤵
                                                                    PID:5416
                                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.30.407793598\944768216" -childID 29 -isForBrowser -prefsHandle 5180 -prefMapHandle 7664 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {18176b42-feed-4b1c-bd08-63103afb1448} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 5812 235144d1e58 tab
                                                                    3⤵
                                                                      PID:6816
                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.31.41051232\268844735" -childID 30 -isForBrowser -prefsHandle 9080 -prefMapHandle 9064 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0cc89896-2a64-438c-ad80-5ce2c2239245} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 9476 235141df258 tab
                                                                      3⤵
                                                                        PID:6180
                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.32.861478014\1108602831" -childID 31 -isForBrowser -prefsHandle 9068 -prefMapHandle 9076 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2ae5aa86-2320-451b-9fd2-0628b4c03c18} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 4800 2351455b058 tab
                                                                        3⤵
                                                                          PID:4508
                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.33.1840508799\133011262" -childID 32 -isForBrowser -prefsHandle 4700 -prefMapHandle 4780 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a9110b96-bcd7-46c1-9fbb-b43021e44862} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 9096 2350ed26d58 tab
                                                                          3⤵
                                                                            PID:5172
                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.34.1657385369\1754141477" -childID 33 -isForBrowser -prefsHandle 4664 -prefMapHandle 9700 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b594b7e4-0b77-4f30-b956-c9a8c8abfe68} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 2956 235125de458 tab
                                                                            3⤵
                                                                              PID:4304
                                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.35.5493931\1799244097" -childID 34 -isForBrowser -prefsHandle 4580 -prefMapHandle 4488 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {39154a43-3e92-488e-9173-2561367874a9} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 4592 235157c0058 tab
                                                                              3⤵
                                                                                PID:6448
                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.36.1853329350\53365822" -childID 35 -isForBrowser -prefsHandle 7636 -prefMapHandle 7632 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5f238a73-3e36-4d57-87f1-418b5613554f} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 7644 235157c0658 tab
                                                                                3⤵
                                                                                  PID:6460
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1216.37.1446108215\1075743820" -childID 36 -isForBrowser -prefsHandle 7428 -prefMapHandle 7424 -prefsLen 27337 -prefMapSize 233444 -jsInitHandle 1136 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9db84bb6-7b48-45ac-b76c-eff4c02728b9} 1216 "\\.\pipe\gecko-crash-server-pipe.1216" 7436 23515912258 tab
                                                                                  3⤵
                                                                                    PID:6784
                                                                              • C:\Windows\system32\rundll32.exe
                                                                                "C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
                                                                                1⤵
                                                                                  PID:10000
                                                                                • C:\Windows\System32\svchost.exe
                                                                                  C:\Windows\System32\svchost.exe -k UnistackSvcGroup
                                                                                  1⤵
                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                  PID:10120

                                                                                Network

                                                                                      MITRE ATT&CK Enterprise v15

                                                                                      Replay Monitor

                                                                                      Loading Replay Monitor...

                                                                                      Downloads

                                                                                      11355

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\11355
                                                                                      • Size 25KB
                                                                                      • SHA256 8018424c22358e1d84f82634ae51c5188c10751b4e7529fbb6bc77fe5e28d31f
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      11756

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\11756
                                                                                      • Size 26KB
                                                                                      • SHA256 4f0a0961dbda389f84293e87fdab82ba3e3953a110d77dae2091d71ef2c651e0
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      1334

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\1334
                                                                                      • Size 115KB
                                                                                      • SHA256 483e478f310d9090371d4154cbb79f5755a9c3156c17e98e725875cfd882771d
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      14620

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\14620
                                                                                      • Size 29KB
                                                                                      • SHA256 5e4df2eb34a85b903df3ecd50db40c141403c6bd6edf19c76c511f30fc7ef2b6
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      15351

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\15351
                                                                                      • Size 8KB
                                                                                      • SHA256 fa760e4e25830acac6fd9c4935f4d5eaf938e80d20ad7a73056e1294993a4f1c
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      15564

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\15564
                                                                                      • Size 10KB
                                                                                      • SHA256 63002116ba306201768e2d404084f83a73ca85ec94d55a25a52df4643c8b4b9b
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      1558

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\1558
                                                                                      • Size 31KB
                                                                                      • SHA256 6268d6f9eaa4496e14f3845a655268337549a01186b527d11a1076a0d3c512c2
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      17886

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\17886
                                                                                      • Size 59KB
                                                                                      • SHA256 7b1ced49d10d5c6bca38844d1610069f6dc0a04c487d353eb5d81d8445011234
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      18617

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\18617
                                                                                      • Size 85KB
                                                                                      • SHA256 347f83558d15e40b0c587eb48b60e0e350a70af702f413471792644e1352c31e
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      18669

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\18669
                                                                                      • Size 8KB
                                                                                      • SHA256 2b4775ca66a80661cb102cabf08c2ccd6f9007b44459149d314d3ab6cd174d85
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      19472

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\19472
                                                                                      • Size 8KB
                                                                                      • SHA256 e9dc81a57443c552cff660f1b1d1691716eec6c45b070161fa2a2e329742da07
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      20034

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\20034
                                                                                      • Size 38KB
                                                                                      • SHA256 3001dec411cb22b979cbd22a8a39ea155b50befcd3ac180935f83539464af0c9
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      22298

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\22298
                                                                                      • Size 9KB
                                                                                      • SHA256 70c113bafeb385fb23b1028d86797b24b128c3a8ed7abfa6605b967b8355f0a7
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      22573

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\22573
                                                                                      • Size 8KB
                                                                                      • SHA256 0c9a85b7d70702c1aca94fb7b93afcd626206a30c7110083d5feb703b1e4d07f
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      26633

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\26633
                                                                                      • Size 7KB
                                                                                      • SHA256 b464ade9b413cf06eea8e4f0b35e56e6acdff8fbd7b8968e32c83df66e832851
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      26868

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\26868
                                                                                      • Size 137KB
                                                                                      • SHA256 fe2cd3c573f2660576046c4a065c5316ebf8e5858c886c6cf78746417faf2ba0
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      2777

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\2777
                                                                                      • Size 9KB
                                                                                      • SHA256 bf9154dcc0ce8a731799eda4ff8bc738e9a1b50da0bf2505f175f79e813cfccc
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      28127

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\28127
                                                                                      • Size 8KB
                                                                                      • SHA256 2cd7ed9140ddbfce5e369a6ca8c30e8f9828ef9942123cba8799a73fedfec6b1
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      29882

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\29882
                                                                                      • Size 42KB
                                                                                      • SHA256 cfc1eff01a8c041388dcc610b9d6a1c7e6855555b6bec2f41f5ad80820c7bd4f
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      30836

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\30836
                                                                                      • Size 28KB
                                                                                      • SHA256 c15998a2961e5191d190913d383e9fbdceda968dcaaaa29142d8a42398edab7c
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      31849

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\31849
                                                                                      • Size 7KB
                                                                                      • SHA256 4a8c05ad8f6ac4e8654aeb88f4a05d7b92b55345d2493ced4da6d6928521926b
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      31948

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\31948
                                                                                      • Size 14KB
                                                                                      • SHA256 ed555db7b4656082ecd50dc8a6d2f840c24fdd386209377e3ab12da29fbafeb7
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      3512

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\3512
                                                                                      • Size 26KB
                                                                                      • SHA256 2806dd1d9b424c8904942a8788a9e7d973a2595a048795a573d7536fd912190c
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      3984

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\3984
                                                                                      • Size 11KB
                                                                                      • SHA256 5be22d1101b8cbc539e45102135f3abecc972d760ccc764561ce9e1b700785fa
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      4599

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\4599
                                                                                      • Size 107KB
                                                                                      • SHA256 7d57542d95ce9799318681ec4cee739ea3be33ff111ec618966b52a8d00fe558
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      5150

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\5150
                                                                                      • Size 9KB
                                                                                      • SHA256 6c1b092be37e336cd44c1554e265fa9ca348ae97482ac2a089488321776200de
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      6343

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\6343
                                                                                      • Size 20KB
                                                                                      • SHA256 b9a6b27f402612693816785ec3650b06ad4a4b044cec4ed36fe36b4b854f870b
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      7388

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\7388
                                                                                      • Size 8KB
                                                                                      • SHA256 f596149241f162b517c03c67a6db67313464e963e9e19b390779b896692ec280
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      8089

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\8089
                                                                                      • Size 33KB
                                                                                      • SHA256 24eb662882b450214d1f12626cffb3738d5bf68e742f5ff3946b512a56c9bcc4
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      9690

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\doomed\9690
                                                                                      • Size 9KB
                                                                                      • SHA256 c6aa9158877d12880f43fce67cb94adb3f9f68d77abb519a880bf2c7b4759c2a
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      0065D8C360607C2636652139E83E2F1F0F219BD8

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\0065D8C360607C2636652139E83E2F1F0F219BD8
                                                                                      • Size 22KB
                                                                                      • SHA256 37ba7b6d3b5115e8a51eebd86d527845fe24d07d6a612c44b459f34903293da2
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      02676827DF3B827E9D2168B3968B4693A151FBDA

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\02676827DF3B827E9D2168B3968B4693A151FBDA
                                                                                      • Size 34KB
                                                                                      • SHA256 67e4454ba5d523e59d0e3e4506abe4512d988ef4efdcdb21d37fb62f956a6ce9
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      0858FCFDF710068DB859BB11C50C473F40736919

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\0858FCFDF710068DB859BB11C50C473F40736919
                                                                                      • Size 18KB
                                                                                      • SHA256 15d3a721b2964d3cf3448193e1d8c788480d104fd33b551f7d2ca4be3d5aa63f
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      0EB6B5D85F4AB37E40CAF88E5D4E5ED52776EFC2

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\0EB6B5D85F4AB37E40CAF88E5D4E5ED52776EFC2
                                                                                      • Size 147KB
                                                                                      • SHA256 68151c0ba0236cc6888457b2322111e61e4e76251194d0cf5a2525be546e3524
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      11C04DE57428944158D7945EF8ACD2A26D7193D1

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\11C04DE57428944158D7945EF8ACD2A26D7193D1
                                                                                      • Size 34KB
                                                                                      • SHA256 c1a683f3eaa2e116963266f9411912a43f7d7f5d8eae9daeb9fec864c02f1598
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      25B5B21197589647415E109D9DE7B01723029B4A

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\25B5B21197589647415E109D9DE7B01723029B4A
                                                                                      • Size 33KB
                                                                                      • SHA256 68dc83c7d500948c594a670a529ff74380792479679d33317f4f584a9a168f3f
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      382B5B3827B4DDFA378A655D1BD82EE2B5E279A6

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\382B5B3827B4DDFA378A655D1BD82EE2B5E279A6
                                                                                      • Size 81KB
                                                                                      • SHA256 6bbc7bb2ea2652faabc3da67cdfa082883cc1d8a13de2855dce1b56d53e04c97
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      43866B0E311A8C5F8898334200C0DF7EE8678EBB

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\43866B0E311A8C5F8898334200C0DF7EE8678EBB
                                                                                      • Size 25KB
                                                                                      • SHA256 c52c1271ef7ab2ea17e0da95b8508068e681a3abec86c9199b148587aba7ab21
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      4671E1FB94264A5F29278A2EC0F96126C2AB3EDB

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\4671E1FB94264A5F29278A2EC0F96126C2AB3EDB
                                                                                      • Size 14KB
                                                                                      • SHA256 a08670cab146e5938e7d8f4f0bcdd2744964c1359c9ee4556fba4d6261adb5e5
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      48E70E7D5E690255092A1E8B2B75C1FB1DC35079

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\48E70E7D5E690255092A1E8B2B75C1FB1DC35079
                                                                                      • Size 15KB
                                                                                      • SHA256 aca4c54d06d03cd4fc5ec6890a4e7a63c9968056327e521e20fde755a5411bbb
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      55E4667628ADFF4424F2998167359EBAF7DA31A3

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\55E4667628ADFF4424F2998167359EBAF7DA31A3
                                                                                      • Size 24KB
                                                                                      • SHA256 59d39546637db516378f6f3d1134be3a507e342425f9a20e2cf85e162ef2580d
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      62600C3E0DC1F42FB32EEC5C2574F6D682DB173C

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\62600C3E0DC1F42FB32EEC5C2574F6D682DB173C
                                                                                      • Size 62KB
                                                                                      • SHA256 275584f517a53052e33e64a3c11c7bfe71fc96c445fc17b4ee4188e6929df944
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      6311D65B2F43B2924D485A8535B44035C9FF6FB1

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\6311D65B2F43B2924D485A8535B44035C9FF6FB1
                                                                                      • Size 29KB
                                                                                      • SHA256 a9afb03ef416ae6df4c4a59205c81bfb6bc043ba2a96f729671d3bc082652fdf
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      69A3FC6F1027C5F5D907579933725219A81FEF1D

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\69A3FC6F1027C5F5D907579933725219A81FEF1D
                                                                                      • Size 20KB
                                                                                      • SHA256 e526a397eb6e090f900318bbe92a19ec4b163a8bfe156217dfd3a83c9eeaeeaf
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      6AD565EB58BDCC8F028DCA34F97D6F0F0DC73674

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\6AD565EB58BDCC8F028DCA34F97D6F0F0DC73674
                                                                                      • Size 14KB
                                                                                      • SHA256 5caed222bed6b87fa4068c3654f6660c863304a21eb744ccd389aeb53c1038c6
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      7184EF7119D274CEBD87C80E6BA480F7BCCB1968

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\7184EF7119D274CEBD87C80E6BA480F7BCCB1968
                                                                                      • Size 121KB
                                                                                      • SHA256 b9b1459180b5a9b20afc4f93c7e822da49ec1146215fa197917d797ff5a3c062
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      7A80E441AABF2DC1CCC724C7DE4B91A9F4B2600D

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\7A80E441AABF2DC1CCC724C7DE4B91A9F4B2600D
                                                                                      • Size 106KB
                                                                                      • SHA256 8d0eaf1272f252f49fb7001514a3493bae56657fd80066f45a9756cc419b1337
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      8A96BD13F39D7B9DEB9AA51030F3316EE0E464B0

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\8A96BD13F39D7B9DEB9AA51030F3316EE0E464B0
                                                                                      • Size 33KB
                                                                                      • SHA256 f6c4e70faf42bec6f465a44d8c533dc0121e43edc082322ffa3e79e9b79363f6
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      9166DFB190D3EC7ED07C8D0A9507C31A88313E9E

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\9166DFB190D3EC7ED07C8D0A9507C31A88313E9E
                                                                                      • Size 30KB
                                                                                      • SHA256 0dd454f71b8385fb937354bd3625f654984fab931450bd15ace3313cf7539f8e
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      96A1C9B77F87B3B67403D9EF251A09EFC175EAB6

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\96A1C9B77F87B3B67403D9EF251A09EFC175EAB6
                                                                                      • Size 99KB
                                                                                      • SHA256 99a56d3cee9bd8a023c26c61a74bbebe34f1bd29d4280ac5c6a557959018d0d6
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      97341BA3D5F900BFE9D1B2BB22FCB1D828EDF50D

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\97341BA3D5F900BFE9D1B2BB22FCB1D828EDF50D
                                                                                      • Size 95KB
                                                                                      • SHA256 89ab8c4813640857e8f7c85b4383b22f2d9423a5908ef18e1ce7b79dbfca48c1
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      97AEBFE67699EF2A18E5D69385B1C1A3030A4183

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\97AEBFE67699EF2A18E5D69385B1C1A3030A4183
                                                                                      • Size 41KB
                                                                                      • SHA256 2f803e230fbefff8c8afe8d7e12ad829f825515abdc2bbfe8b25098f9a24d6d7
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      A7BDE421F123E9DFA2B93C69A74AB91556B4F703

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\A7BDE421F123E9DFA2B93C69A74AB91556B4F703
                                                                                      • Size 56KB
                                                                                      • SHA256 4c47ebab4f3b0ff3efdba1bc0e930ebbe05e11738fe02006d012a4942356b065
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      AA5654EC575DF7D190BA3F20D2698EA32B9501B3

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\AA5654EC575DF7D190BA3F20D2698EA32B9501B3
                                                                                      • Size 14KB
                                                                                      • SHA256 0b16d2a28c51438c0629e0fdfb464fb52201853493efcaf315a3b3626f5e424d
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      AC42C11F9BBBC956D60FD4EBA4DA5E0E8855949F

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\AC42C11F9BBBC956D60FD4EBA4DA5E0E8855949F
                                                                                      • Size 60KB
                                                                                      • SHA256 d9ffc70449f36f7063725bc7dbdb73ab546ed95d9ba23d2eebe8ba83c8ddfe72
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      B3620EC53598676EBF1D0227A067E666471576FE

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\B3620EC53598676EBF1D0227A067E666471576FE
                                                                                      • Size 61KB
                                                                                      • SHA256 ffa9c2a48b120718327ca0e5ea8c6eb1a1573a08a34a1568706b9b9826b75b5b
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      B65D918B29A17BC137BE8D321374C6A6762EC06B

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\B65D918B29A17BC137BE8D321374C6A6762EC06B
                                                                                      • Size 24KB
                                                                                      • SHA256 bdb60aa36fd33229bfdfcd9dbf1c3ec083a2fd0513b80d1652f42a4e9cb75e7c
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      B7DFAA48376B6DD216B282CA105E159891C17C90

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\B7DFAA48376B6DD216B282CA105E159891C17C90
                                                                                      • Size 24KB
                                                                                      • SHA256 9e83ea86d47e6eafd9ac3450c00b265e64f239fe6019beadffcedf3b510fe620
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      BD4CA1D4B4266D61825709642FCA56121B4B4D98

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\BD4CA1D4B4266D61825709642FCA56121B4B4D98
                                                                                      • Size 56KB
                                                                                      • SHA256 81352b15afb75a895717143a0bfffee99f89cdb2c56535bb426f5d2fba8cb8de
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      C1C304F7DEC91DD0D463A9C744C1F476511EC25D

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\C1C304F7DEC91DD0D463A9C744C1F476511EC25D
                                                                                      • Size 207KB
                                                                                      • SHA256 08c9efda8bab8c751acdcce4954c116a412f1dbd43231d8e694ac6e47a436482
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      CBD8F58D83D1F54AEC1A57D2A182D0B2ACC82119

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\CBD8F58D83D1F54AEC1A57D2A182D0B2ACC82119
                                                                                      • Size 55KB
                                                                                      • SHA256 da428ed8e7017a2444d1fba3b23e609cee950dc787f66773a0bc5053a6a6a8ff
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      CDAA313A9EEC7EDC2D9FCE971AEBD9289793DB30

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\CDAA313A9EEC7EDC2D9FCE971AEBD9289793DB30
                                                                                      • Size 83KB
                                                                                      • SHA256 dd58b8d2abff525dbb541395bd218e5f4331fbb1439fafb2a7bc9253bca3716b
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      D320F193E80259BEDFA3A5A13F72AAF038B2F2B2

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\D320F193E80259BEDFA3A5A13F72AAF038B2F2B2
                                                                                      • Size 57KB
                                                                                      • SHA256 8e6a46e7ab54de4a85cf9bbe065dd4988a656ad294c699ac22f59950c3bf641a
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      D5AA3A2894729A8BD264ECE9438C93C8DC7BAA02

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\D5AA3A2894729A8BD264ECE9438C93C8DC7BAA02
                                                                                      • Size 85KB
                                                                                      • SHA256 08a433fadd20bc2db374b36bea9447f25c644d25e7274761b28001b263be2253
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      DBD78B5F0DD5928F802E6B4677A914D2D6B73B75

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\DBD78B5F0DD5928F802E6B4677A914D2D6B73B75
                                                                                      • Size 74KB
                                                                                      • SHA256 5092b8c80132938e0209fded7d31541cc35096b558bf809a531b27a157bfc712
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      F56D4F5CE234B178201E2D8AD86AE81477849F03

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\F56D4F5CE234B178201E2D8AD86AE81477849F03
                                                                                      • Size 66KB
                                                                                      • SHA256 9cf27853f5df643c9a702b618b1cd0f40acfe93f1f45c1a1b267d828038911c3
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      F8BE9D499518F26DA2C974465152FF993B4E53BE

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\F8BE9D499518F26DA2C974465152FF993B4E53BE
                                                                                      • Size 15KB
                                                                                      • SHA256 908aea7cf197d58dcd8f6edef808d0a4edcefbfdd3370b739d5771acc982274e
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      FD027C8AA7FA70C1C37993FC4EB6FDC74D9F2808

                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\cache2\entries\FD027C8AA7FA70C1C37993FC4EB6FDC74D9F2808
                                                                                      • Size 64KB
                                                                                      • SHA256 24a44e3605f1c61be20597c2c6c0e59fe52311d0eb1b6fbf66fe3c5b93a2589f
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      tmpaddon

                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                                      • Size 442KB
                                                                                      • SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      tmpaddon-1

                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon-1
                                                                                      • Size 8.0MB
                                                                                      • SHA256 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      6824f4a902c78fbd.customDestinations-ms

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                                                                      • Size 10KB
                                                                                      • SHA256 479dbe9cd7395401796a0ad3c5fefaf34b7a3956634b82bb51fcd9b7426008e9
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      6824f4a902c78fbd.customDestinations-ms

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                                                                      • Size 11KB
                                                                                      • SHA256 8072e153f21d336a9384b8d10ebcad71ff2ec3e9c120429a4e4c49380475a4ce
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      addonStartup.json.lz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\addonStartup.json.lz4
                                                                                      • Size 5KB
                                                                                      • SHA256 32874cc791c3d75056e14318126e5a828865ae445816b6d2fd5bfe71e40d47a9
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      bookmarks-2024-03-26_11_MT-WH7KHvv8us+gkmhqygg==.jsonlz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\bookmarkbackups\bookmarks-2024-03-26_11_MT-WH7KHvv8us+gkmhqygg==.jsonlz4
                                                                                      • Size 941B
                                                                                      • SHA256 b2e0b1964c447701b08b0570229f29e5296d0699b2120e87af1bceb9c6e7f728
                                                                                      • MD5 SHA1 SHA512

                                                                                      broadcast-listeners.json

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\broadcast-listeners.json
                                                                                      • Size 204B
                                                                                      • SHA256 9cf589357fceea2f37cd1a925e5d33fd517a44d22a16c357f7fb5d4d187034aa
                                                                                      • MD5 SHA1 SHA512

                                                                                      data.safe.bin

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\datareporting\glean\db\data.safe.bin
                                                                                      • Size 9KB
                                                                                      • SHA256 4979e05da867b2bb2774ca22567d11c8de062eb0e7664a45be97be4a602ee12f
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      e57f0951-db5c-4320-80d7-5661d489b0e1

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\datareporting\glean\pending_pings\e57f0951-db5c-4320-80d7-5661d489b0e1
                                                                                      • Size 734B
                                                                                      • SHA256 5ac4e6310e58d4e9a8eac1ee1a8cb27e04d92b26bc84752a8367fe7e35fc553f
                                                                                      • MD5 SHA1 SHA512

                                                                                      gmpopenh264.dll

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll
                                                                                      • Size 997KB
                                                                                      • SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      gmpopenh264.info

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info
                                                                                      • Size 116B
                                                                                      • SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
                                                                                      • MD5 SHA1 SHA512

                                                                                      LICENSE.txt

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt
                                                                                      • Size 479B
                                                                                      • SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
                                                                                      • MD5 SHA1 SHA512

                                                                                      manifest.json

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json
                                                                                      • Size 372B
                                                                                      • SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
                                                                                      • MD5 SHA1 SHA512

                                                                                      widevinecdm.dll

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll
                                                                                      • Size 249KB
                                                                                      • SHA256 eb5a52667157bc68f9024d081174e8b33998374bc8f8a3b44eb975fd66bb1add
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      widevinecdm.dll.lib

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib
                                                                                      • Size 1KB
                                                                                      • SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
                                                                                      • MD5 SHA1 SHA512

                                                                                      widevinecdm.dll.sig

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig
                                                                                      • Size 1KB
                                                                                      • SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
                                                                                      • MD5 SHA1 SHA512

                                                                                      prefs-1.js

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\prefs-1.js
                                                                                      • Size 6KB
                                                                                      • SHA256 739d6ec9b3dc04cf5fd0d7cb5449fdf38db347bec65e7ff0ad041e99f8728c4e
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      prefs-1.js

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\prefs-1.js
                                                                                      • Size 7KB
                                                                                      • SHA256 bf9677405e18dc2d322abd8015eb2d7b43a2eb54aa022ece73ac3173336036bd
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      prefs-1.js

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\prefs-1.js
                                                                                      • Size 6KB
                                                                                      • SHA256 935904eea8eabcbccce5fbea1f5d712e5ecde35c6f2af5bf9807de17fd5f8c79
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      prefs-1.js

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\prefs-1.js
                                                                                      • Size 7KB
                                                                                      • SHA256 0bd8a74f0695770b9ac9c4d3b7e4404ee7c6cf0986876e96dd699ec95988c48c
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      recovery.jsonlz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                      • Size 3KB
                                                                                      • SHA256 39e49d2b47ea7c63f276c0c7471397f471634814748b4af2af616a75ba00beb3
                                                                                      • MD5 SHA1 SHA512

                                                                                      recovery.jsonlz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                      • Size 1KB
                                                                                      • SHA256 f0b97429de41e74ed859cd89f204978e67c883f7a4890f44622b8636964cf9fa
                                                                                      • MD5 SHA1 SHA512

                                                                                      recovery.jsonlz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                      • Size 5KB
                                                                                      • SHA256 b88ab1cb9a83c1ae3598f2534a85fe9d3c7cb770816b755183364d6f0281e6e0
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      recovery.jsonlz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                      • Size 4KB
                                                                                      • SHA256 087b61e0550e2193770f3e4d523069121bf4007cf1b10c4dcdcbd40682c6ac7d
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      recovery.jsonlz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                      • Size 5KB
                                                                                      • SHA256 72bbb84fdf3138bf645dbc3a9b52ef7f1ef008b2b56e2f9af9776d717ba38aed
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      recovery.jsonlz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                      • Size 5KB
                                                                                      • SHA256 3b5192197a699800c41db9a8ee3f5702b77726233906ea6949a70a151514015e
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      recovery.jsonlz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                      • Size 3KB
                                                                                      • SHA256 d9b5991d60789ba977ada8f33b6f01210f48b43aeb47d7752444c65d99f87ec9
                                                                                      • MD5 SHA1 SHA512

                                                                                      recovery.jsonlz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                      • Size 5KB
                                                                                      • SHA256 5b7bec49490a930eb44a79f8c3ee059d7706f9c182bce6f77a19e217a5ec0cef
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      recovery.jsonlz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                      • Size 4KB
                                                                                      • SHA256 f6d89cad3f0c37f0340824abfbc1eca9f4893000ac815e0d85d91713ade2f419
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      recovery.jsonlz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                      • Size 5KB
                                                                                      • SHA256 0ff3aaa251ede1a1427dc4612e41f919f6919b549fee28afe5d255f3dc720beb
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      recovery.jsonlz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                      • Size 5KB
                                                                                      • SHA256 88fd3f4900ec8dcfd155a2293a4f5a75b9c6207d8348de8d52a940f4bbefa087
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      recovery.jsonlz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                      • Size 5KB
                                                                                      • SHA256 792f7cbce7db2a0caff8df77b5dca11955aa190bbfec76f94dfb01233fe48a7d
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      recovery.jsonlz4

                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7nvvjyxe.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                      • Size 5KB
                                                                                      • SHA256 60b47974bfe11404a094fe0ffb4988b881160965c9d37117c6f7a8db20b58621
                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                      memory/10120-2576-0x00000267636E0000-0x00000267636E1000-memory.dmp

                                                                                      memory/10120-2577-0x00000267636E0000-0x00000267636E1000-memory.dmp

                                                                                      memory/10120-2578-0x00000267637F0000-0x00000267637F1000-memory.dmp

                                                                                      memory/10120-2574-0x00000267636B0000-0x00000267636B1000-memory.dmp

                                                                                      memory/10120-2558-0x000002675B340000-0x000002675B350000-memory.dmp

                                                                                      memory/10120-2542-0x000002675B240000-0x000002675B250000-memory.dmp