hxxps://gamejolt[.]com/games/Nun/991274

Resubmissions

19/06/2026, 17:22

260619-vx2y2abs2w6

19/06/2026, 17:18

260619-vvncvsa18t6

Analysis

user interaction
yes
max time kernel
360s
max time network
315s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/06/2026, 17:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://gamejolt.com/games/Nun/991274
Sample260619-vx2y2abs2w

Score

6^/10

motw persistence phishing

Malware Config

Signatures

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc	pid	Process
589	https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html	3180	firefox.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Checks processor information in registry 2 TTPs 64 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{3BDBECA3-1783-4AD8-BE36-A95A7D66F1B2}	Nun Massacre.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\nun-massacre-definitive-edition-windows-2022.06.08.zip:Zone.Identifier	firefox.exe

Suspicious behavior: EnumeratesProcesses 63 IoCs

pid	Process
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	3180	firefox.exe
Token: SeDebugPrivilege	3180	firefox.exe
Token: SeDebugPrivilege	3180	firefox.exe
Token: SeDebugPrivilege	3180	firefox.exe
Token: SeDebugPrivilege	3180	firefox.exe
Token: SeDebugPrivilege	3180	firefox.exe
Token: SeDebugPrivilege	3180	firefox.exe
Token: SeDebugPrivilege	9736	taskmgr.exe
Token: SeSystemProfilePrivilege	9736	taskmgr.exe
Token: SeCreateGlobalPrivilege	9736	taskmgr.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3180	firefox.exe
3180	firefox.exe
3180	firefox.exe
3180	firefox.exe
3180	firefox.exe
3180	firefox.exe
3180	firefox.exe
3180	firefox.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe
9736	taskmgr.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
3180	firefox.exe
3180	firefox.exe
3180	firefox.exe
3180	firefox.exe
7788	Nun Massacre.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1968 wrote to memory of 3180	1968	firefox.exe	84
PID 1968 wrote to memory of 3180	1968	firefox.exe	84
PID 3180 wrote to memory of 4848	3180	firefox.exe	85
PID 3180 wrote to memory of 4848	3180	firefox.exe	85
PID 3180 wrote to memory of 4848	3180	firefox.exe	85
PID 3180 wrote to memory of 4044	3180	firefox.exe	88
PID 3180 wrote to memory of 4044	3180	firefox.exe	88
PID 3180 wrote to memory of 4044	3180	firefox.exe	88
PID 3180 wrote to memory of 4044	3180	firefox.exe	88
PID 3180 wrote to memory of 548	3180	firefox.exe	90
PID 3180 wrote to memory of 548	3180	firefox.exe	90
PID 3180 wrote to memory of 548	3180	firefox.exe	90
PID 3180 wrote to memory of 548	3180	firefox.exe	90
PID 3180 wrote to memory of 5092	3180	firefox.exe	91
PID 3180 wrote to memory of 5092	3180	firefox.exe	91
PID 3180 wrote to memory of 5092	3180	firefox.exe	91
PID 3180 wrote to memory of 3228	3180	firefox.exe	92
PID 3180 wrote to memory of 3228	3180	firefox.exe	92
PID 3180 wrote to memory of 3228	3180	firefox.exe	92
PID 3180 wrote to memory of 3228	3180	firefox.exe	92
PID 3180 wrote to memory of 2672	3180	firefox.exe	93
PID 3180 wrote to memory of 2672	3180	firefox.exe	93
PID 3180 wrote to memory of 2672	3180	firefox.exe	93
PID 3180 wrote to memory of 2672	3180	firefox.exe	93
PID 3180 wrote to memory of 2332	3180	firefox.exe	94
PID 3180 wrote to memory of 2332	3180	firefox.exe	94
PID 3180 wrote to memory of 2332	3180	firefox.exe	94
PID 3180 wrote to memory of 2332	3180	firefox.exe	94
PID 3180 wrote to memory of 364	3180	firefox.exe	95
PID 3180 wrote to memory of 364	3180	firefox.exe	95
PID 3180 wrote to memory of 364	3180	firefox.exe	95
PID 3180 wrote to memory of 364	3180	firefox.exe	95
PID 3180 wrote to memory of 4568	3180	firefox.exe	96
PID 3180 wrote to memory of 4568	3180	firefox.exe	96
PID 3180 wrote to memory of 4568	3180	firefox.exe	96
PID 3180 wrote to memory of 4568	3180	firefox.exe	96
PID 3180 wrote to memory of 3476	3180	firefox.exe	99
PID 3180 wrote to memory of 3476	3180	firefox.exe	99
PID 3180 wrote to memory of 3476	3180	firefox.exe	99
PID 3180 wrote to memory of 3476	3180	firefox.exe	99
PID 3180 wrote to memory of 564	3180	firefox.exe	100
PID 3180 wrote to memory of 564	3180	firefox.exe	100
PID 3180 wrote to memory of 564	3180	firefox.exe	100
PID 3180 wrote to memory of 564	3180	firefox.exe	100
PID 3180 wrote to memory of 4284	3180	firefox.exe	109
PID 3180 wrote to memory of 4284	3180	firefox.exe	109
PID 3180 wrote to memory of 4284	3180	firefox.exe	109
PID 3180 wrote to memory of 4284	3180	firefox.exe	109
PID 3180 wrote to memory of 3592	3180	firefox.exe	110
PID 3180 wrote to memory of 3592	3180	firefox.exe	110
PID 3180 wrote to memory of 3592	3180	firefox.exe	110
PID 3180 wrote to memory of 3592	3180	firefox.exe	110
PID 3180 wrote to memory of 3752	3180	firefox.exe	111
PID 3180 wrote to memory of 3752	3180	firefox.exe	111
PID 3180 wrote to memory of 3752	3180	firefox.exe	111
PID 3180 wrote to memory of 3752	3180	firefox.exe	111
PID 3180 wrote to memory of 3960	3180	firefox.exe	112
PID 3180 wrote to memory of 3960	3180	firefox.exe	112
PID 3180 wrote to memory of 3960	3180	firefox.exe	112
PID 3180 wrote to memory of 3960	3180	firefox.exe	112
PID 3180 wrote to memory of 2660	3180	firefox.exe	113
PID 3180 wrote to memory of 2660	3180	firefox.exe	113
PID 3180 wrote to memory of 2660	3180	firefox.exe	113
PID 3180 wrote to memory of 2660	3180	firefox.exe	113

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://gamejolt.com/games/Nun/991274"
1⤵
- Suspicious use of WriteProcessMemory
PID:1968
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://gamejolt.com/games/Nun/991274
  2⤵
  - Drops desktop.ini file(s)
  - Mark of the Web detected: This indicates that the page was originally saved or cloned.
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3180
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1972 -prefsLen 27099 -prefMapHandle 1980 -prefMapSize 270279 -ipcHandle 2068 -initialChannelId {ded5e7e1-3f4f-4a94-b709-8f0ea04e07c4} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4848
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2452 -prefsLen 27135 -prefMapHandle 2456 -prefMapSize 270279 -ipcHandle 2464 -initialChannelId {fe937a80-4586-4284-8578-6af42ea8cc52} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:4044
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3816 -prefsLen 25164 -prefMapHandle 3820 -prefMapSize 270279 -jsInitHandle 3824 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3832 -initialChannelId {01c25f32-565b-4c38-8b8c-ea52266f68f7} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:548
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4004 -prefsLen 27276 -prefMapHandle 4008 -prefMapSize 270279 -ipcHandle 3816 -initialChannelId {c087df1a-7fa1-4252-a4d3-d479d576cdaf} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:5092
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3236 -prefsLen 34775 -prefMapHandle 2908 -prefMapSize 270279 -jsInitHandle 3348 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2960 -initialChannelId {4bd42c8d-009f-4350-bf91-cb044e68c752} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:3228
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4996 -prefsLen 35012 -prefMapHandle 5000 -prefMapSize 270279 -ipcHandle 5008 -initialChannelId {c20ec363-6751-4ce2-a591-3cca226076ef} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:2672
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5232 -prefsLen 32900 -prefMapHandle 5236 -prefMapSize 270279 -jsInitHandle 5240 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5216 -initialChannelId {e6f0e5b8-d9df-4fde-97b5-b540319e3745} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:2332
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5256 -prefsLen 32900 -prefMapHandle 5260 -prefMapSize 270279 -jsInitHandle 5264 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5272 -initialChannelId {70272427-f4ee-4003-b9ae-eae25170b657} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    PID:364
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5600 -prefsLen 32952 -prefMapHandle 5604 -prefMapSize 270279 -jsInitHandle 5608 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5616 -initialChannelId {e2e52e57-5aef-480c-9800-9afebe5b6fd4} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:4568
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 5900 -prefsLen 35064 -prefMapHandle 3368 -prefMapSize 270279 -ipcHandle 5964 -initialChannelId {1a854dec-1dac-49ab-9a93-66cc4c4aff49} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 utility
    3⤵
    PID:3476
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6580 -prefsLen 32952 -prefMapHandle 6584 -prefMapSize 270279 -jsInitHandle 6588 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6596 -initialChannelId {7db15913-9022-4713-9b35-647575877daa} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:564
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3016 -prefsLen 32952 -prefMapHandle 3020 -prefMapSize 270279 -jsInitHandle 5524 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5344 -initialChannelId {7cdd7a98-12d1-4af9-ae95-eaf6bd74c074} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    PID:4284
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5328 -prefsLen 32952 -prefMapHandle 5796 -prefMapSize 270279 -jsInitHandle 6252 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6408 -initialChannelId {545b9d11-bcc6-469b-9bec-c3f3438f3bd7} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:3592
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7076 -prefsLen 32952 -prefMapHandle 7080 -prefMapSize 270279 -jsInitHandle 7084 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7092 -initialChannelId {41c49ed8-c106-4c4e-a130-c39148053de6} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:3752
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7112 -prefsLen 32952 -prefMapHandle 7116 -prefMapSize 270279 -jsInitHandle 7120 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7124 -initialChannelId {d6ed4d6d-4aef-46a7-8a52-fb3deb2a982a} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    PID:3960
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7468 -prefsLen 32952 -prefMapHandle 7472 -prefMapSize 270279 -jsInitHandle 7476 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7484 -initialChannelId {b8dd7ae1-f45c-4b5c-9934-c80dd72e14ed} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
    3⤵
    PID:2660
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7520 -prefsLen 32952 -prefMapHandle 7524 -prefMapSize 270279 -jsInitHandle 7528 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7536 -initialChannelId {da428703-647f-4205-a133-a2e17f8cb527} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
    3⤵
    - Checks processor information in registry
    PID:1772
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7844 -prefsLen 32952 -prefMapHandle 7840 -prefMapSize 270279 -jsInitHandle 7836 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7512 -initialChannelId {6347723d-e685-4811-9998-a2cee18a07bb} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
    3⤵
    - Checks processor information in registry
    PID:5340
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5328 -prefsLen 32952 -prefMapHandle 5796 -prefMapSize 270279 -jsInitHandle 6252 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5352 -initialChannelId {9668793f-c236-490c-b86f-57ccc51e8d03} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
    3⤵
    - Checks processor information in registry
    PID:5444
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8044 -prefsLen 32952 -prefMapHandle 8048 -prefMapSize 270279 -jsInitHandle 8052 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8060 -initialChannelId {3123f104-5048-459a-af03-07e0ba6a07c6} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
    3⤵
    - Checks processor information in registry
    PID:5524
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8248 -prefsLen 32952 -prefMapHandle 8252 -prefMapSize 270279 -jsInitHandle 8256 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6556 -initialChannelId {32e88e0a-8ba7-4689-b011-e99936919385} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
    3⤵
    PID:5540
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8052 -prefsLen 32952 -prefMapHandle 8060 -prefMapSize 270279 -jsInitHandle 8036 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8200 -initialChannelId {550b0513-eed0-4249-9f52-054b67ae1d7d} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
    3⤵
    - Checks processor information in registry
    PID:2360
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8592 -prefsLen 32952 -prefMapHandle 8604 -prefMapSize 270279 -jsInitHandle 8732 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8564 -initialChannelId {102ecf8e-9fe4-4c75-8f7c-00e9d70306f4} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 23 tab
    3⤵
    - Checks processor information in registry
    PID:6192
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8736 -prefsLen 32952 -prefMapHandle 8740 -prefMapSize 270279 -jsInitHandle 8744 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8584 -initialChannelId {ea674cfb-140a-4b79-bd77-04f9f56c1558} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 24 tab
    3⤵
    PID:6200
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8844 -prefsLen 32952 -prefMapHandle 8848 -prefMapSize 270279 -jsInitHandle 8852 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8060 -initialChannelId {cfdad1f7-056b-437b-865d-b5e0770f187d} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 25 tab
    3⤵
    - Checks processor information in registry
    PID:6224
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9108 -prefsLen 32992 -prefMapHandle 9104 -prefMapSize 270279 -jsInitHandle 9100 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9144 -initialChannelId {32adf130-1176-4100-b9e6-c40a91f813ed} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 26 tab
    3⤵
    - Checks processor information in registry
    PID:6480
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9288 -prefsLen 32992 -prefMapHandle 9300 -prefMapSize 270279 -jsInitHandle 9308 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8848 -initialChannelId {4f36c9f7-a3f3-41af-aee6-0959e72f69d1} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 27 tab
    3⤵
    - Checks processor information in registry
    PID:7024
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9108 -prefsLen 32992 -prefMapHandle 9104 -prefMapSize 270279 -jsInitHandle 9100 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9116 -initialChannelId {fef20094-895a-4314-987c-a146e8c446c5} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 28 tab
    3⤵
    - Checks processor information in registry
    PID:7132
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10036 -prefsLen 32992 -prefMapHandle 10040 -prefMapSize 270279 -jsInitHandle 10044 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10052 -initialChannelId {2ce45fd0-71c5-4127-8b7b-7a0d34dd01a9} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 29 tab
    3⤵
    - Checks processor information in registry
    PID:6524
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10072 -prefsLen 32992 -prefMapHandle 10076 -prefMapSize 270279 -jsInitHandle 10080 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9968 -initialChannelId {3f681464-bad2-4a81-8fb7-a7e424d2c134} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 30 tab
    3⤵
    - Checks processor information in registry
    PID:6532
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10272 -prefsLen 32992 -prefMapHandle 8716 -prefMapSize 270279 -jsInitHandle 10284 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10292 -initialChannelId {34d5c0b3-024e-496d-a038-6ea2b2608fcb} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 31 tab
    3⤵
    - Checks processor information in registry
    PID:6560
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10536 -prefsLen 32992 -prefMapHandle 10540 -prefMapSize 270279 -jsInitHandle 10544 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10556 -initialChannelId {df7add53-32af-4f8e-9274-7d22a03adb72} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 32 tab
    3⤵
    - Checks processor information in registry
    PID:7316
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10568 -prefsLen 32992 -prefMapHandle 10572 -prefMapSize 270279 -jsInitHandle 10576 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10584 -initialChannelId {aa12a652-795a-4615-b879-ab0fba1706dc} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 33 tab
    3⤵
    - Checks processor information in registry
    PID:7328
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10600 -prefsLen 32992 -prefMapHandle 10604 -prefMapSize 270279 -jsInitHandle 10608 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10616 -initialChannelId {4f27fc82-d720-4cf3-a050-4fd02b7b636b} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 34 tab
    3⤵
    - Checks processor information in registry
    PID:7336
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11196 -prefsLen 32992 -prefMapHandle 11200 -prefMapSize 270279 -jsInitHandle 11204 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11180 -initialChannelId {e45face8-0a2b-479c-b35a-d0f892504ea9} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 35 tab
    3⤵
    PID:7376
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10996 -prefsLen 32992 -prefMapHandle 10992 -prefMapSize 270279 -jsInitHandle 10988 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10980 -initialChannelId {0cb5aacb-721e-4e7a-ad9b-bba1cdb4b961} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 36 tab
    3⤵
    - Checks processor information in registry
    PID:8236
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11556 -prefsLen 32992 -prefMapHandle 11552 -prefMapSize 270279 -jsInitHandle 11548 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11540 -initialChannelId {d7e9bf5e-0101-4363-936c-e30e37ca1909} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 37 tab
    3⤵
    - Checks processor information in registry
    PID:8280
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11240 -prefsLen 32992 -prefMapHandle 11196 -prefMapSize 270279 -jsInitHandle 11856 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12080 -initialChannelId {d67a510f-4773-4e3f-bac2-75754d2b19a5} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 38 tab
    3⤵
    - Checks processor information in registry
    PID:8328
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11836 -prefsLen 32992 -prefMapHandle 11832 -prefMapSize 270279 -jsInitHandle 11828 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11212 -initialChannelId {91046db6-5207-48be-8f14-347dfbc9ac8c} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 39 tab
    3⤵
    - Checks processor information in registry
    PID:8344
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2660 -prefsLen 33182 -prefMapHandle 11568 -prefMapSize 270279 -jsInitHandle 11564 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11896 -initialChannelId {20b706ee-2def-46fd-8b8a-cb1e97674093} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 40 tab
    3⤵
    PID:8404
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4604 -prefsLen 33182 -prefMapHandle 4748 -prefMapSize 270279 -jsInitHandle 11672 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10992 -initialChannelId {e16086c5-898b-405f-8302-d0b5cc367474} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 41 tab
    3⤵
    - Checks processor information in registry
    PID:8260
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12600 -prefsLen 33182 -prefMapHandle 12596 -prefMapSize 270279 -jsInitHandle 12592 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4604 -initialChannelId {e6c821df-beed-49f3-904a-69b97b985ddb} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 42 tab
    3⤵
    - Checks processor information in registry
    PID:8668
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11716 -prefsLen 33182 -prefMapHandle 11728 -prefMapSize 270279 -jsInitHandle 11724 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12732 -initialChannelId {78b12ba4-42b4-4aee-b5c0-7f2294d062ee} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 43 tab
    3⤵
    - Checks processor information in registry
    PID:7484
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12848 -prefsLen 33182 -prefMapHandle 12852 -prefMapSize 270279 -jsInitHandle 12856 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12392 -initialChannelId {82489825-cb05-43e7-9ba9-70d21b3e0855} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 44 tab
    3⤵
    - Checks processor information in registry
    PID:7516
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4684 -prefsLen 33182 -prefMapHandle 4512 -prefMapSize 270279 -jsInitHandle 12404 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6372 -initialChannelId {2df15f07-c69e-40f9-9482-c071796236c2} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 45 tab
    3⤵
    PID:7592
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4908 -prefsLen 33182 -prefMapHandle 5732 -prefMapSize 270279 -jsInitHandle 11724 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4696 -initialChannelId {f0268139-221c-44a3-bcf1-bfc53513a0f9} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 46 tab
    3⤵
    PID:4744
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1548 -prefsLen 33182 -prefMapHandle 2904 -prefMapSize 270279 -jsInitHandle 2912 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12968 -initialChannelId {9d267b54-7664-4098-9ffe-2fd7c2f881c2} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 47 tab
    3⤵
    - Checks processor information in registry
    PID:7600
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12848 -prefsLen 33182 -prefMapHandle 12852 -prefMapSize 270279 -jsInitHandle 12880 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12840 -initialChannelId {04de64bd-cff4-4fb3-9bf1-cdd9655f5926} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 48 tab
    3⤵
    - Checks processor information in registry
    PID:8016
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 14256 -prefsLen 33287 -prefMapHandle 14260 -prefMapSize 270279 -jsInitHandle 14264 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 13560 -initialChannelId {36be4d07-4945-4f40-bc19-1494a3e45340} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 49 tab
    3⤵
    - Checks processor information in registry
    PID:9524
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 14456 -prefsLen 33287 -prefMapHandle 14460 -prefMapSize 270279 -jsInitHandle 14464 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 14272 -initialChannelId {a25158ac-1c09-4d01-bed6-fac00d0ef845} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 50 tab
    3⤵
    - Checks processor information in registry
    PID:9532
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 14388 -prefsLen 33472 -prefMapHandle 14384 -prefMapSize 270279 -jsInitHandle 14380 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4948 -initialChannelId {38e4640b-3f98-45e4-b9a1-31261a73e8c6} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 51 tab
    3⤵
    - Checks processor information in registry
    PID:9956
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 15236 -prefsLen 33583 -prefMapHandle 15232 -prefMapSize 270279 -jsInitHandle 15228 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 14392 -initialChannelId {e5d37abf-9fe7-4c81-9ba5-7c0aca8565a6} -parentPid 3180 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3180" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 52 tab
    3⤵
    - Checks processor information in registry
    PID:10764

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:10576

C:\Users\Admin\Desktop\Nun Massacre Definitive Edition (Windows) 2022.06.08\Nun Massacre.exe
"C:\Users\Admin\Desktop\Nun Massacre Definitive Edition (Windows) 2022.06.08\Nun Massacre.exe"
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:7788
- C:\Users\Admin\Desktop\Nun Massacre Definitive Edition (Windows) 2022.06.08\UnityCrashHandler64.exe
  "C:\Users\Admin\Desktop\Nun Massacre Definitive Edition (Windows) 2022.06.08\UnityCrashHandler64.exe" --attach 7788 2312512933888
  2⤵
  PID:10348
- - C:\Users\Admin\Desktop\Nun Massacre Definitive Edition (Windows) 2022.06.08\UnityCrashHandler64.exe
    "C:\Users\Admin\Desktop\Nun Massacre Definitive Edition (Windows) 2022.06.08\UnityCrashHandler64.exe" "7788" "2312512933888"
    3⤵
    PID:432

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x300 0x308
1⤵
PID:10024

C:\Windows\system32\werfault.exe
werfault.exe /h /shared Global\b1a1c786f7904d5f98b01a9988994e88 /t 7792 /p 7788
1⤵
PID:10664

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:9736

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

03100235E7AEBB25C597DD91664A8F544DDFC529

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jaarrave.default-release\cache2\entries\03100235E7AEBB25C597DD91664A8F544DDFC529
Size 13KB
SHA256 f84553e8bda71698b27ae17e4214c1222282bb8838a3ca12a3376893bbfaf5b5
MD5 a55b6482226793a061d83e37a15511a1
SHA1 201d622bddda0bbf850d17b7f828608dcf16f298
SHA512 55c09dd376c6bf6ec551cd96db12fe23f5ca88d18bc01fd6757d9180e49356f972f4a91b3edfd54ca86ff2205247b7424b2c3ce963a4d5667a693f0106393cf8
SSDEEP 384:HPC9iO024Yxo6J+Sl1xDnZBPsac4j0lpDII+Btzt7:v9ZYxo0+Sl7zZlsac4ID8LLB7
TLSH
T11F529EBA5F0238EA1D27D1A0E5FE5344CD04A6BFDEE2905A05143C04CA447B9F4E68CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

125D9EA256EAEB7029C5A1B0F6F40DF30651F249

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jaarrave.default-release\cache2\entries\125D9EA256EAEB7029C5A1B0F6F40DF30651F249
Size 54KB
SHA256 cdf940ad3cca6f3d1d1b128ae3d36dedaf1b7ae19e2b4ea3ebb43b96c25fab83
MD5 3bd84fa36800f628fc284c076da26184
SHA1 a8a0d57c499f7c262e510bb73a238f2e92f82ef1
SHA512 55c7b9777eb8a1dd8a98d5d136913886df649b248fb141c62341e575465a1c534644c3ee5c7610e152523f373581e7503e316b52855fdd3737f42ad5d7f9c1bd
SSDEEP 384:+gY4xHka/+1py1q5ka/+1py1y4XXrIVy8e2B:+74xHka/+mw5ka/+mo4X7IVy8dB
TLSH
T16A4375BAF49CFE3D2B469F8690250D49CD479C7BF3CD43A9C9461EA70F9142C3588A89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1D98982E93C64F939679D3EC3D3E679805E9306F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jaarrave.default-release\cache2\entries\1D98982E93C64F939679D3EC3D3E679805E9306F
Size 18KB
SHA256 d306d48bcaafaaeb1a4fca7eeb1f36d2ad75c5a6cdc0e6cfbacb8c2dac3f7f7a
MD5 f38d28fcf6df928df43af200ead32609
SHA1 0425e0fb9e50a2303ef32438e492cc98c8f86732
SHA512 be093477e87ed64116b1acad1590af17be182a4c9c4692961a3132346eefd2125e655f6b3e0a339c5526919d1aad9b76fa9041ffbdd7547ba29e99c5cd89ee61
SSDEEP 384:vbMdfdyKvJYZ1+U9FYPmOmOOd/I75G8fTQs92JV47rlocpw8:AqnTYPOd/I7Lfks3rCk
TLSH
T141821BBBF5C8BE2D2B479E95C4660C58CD079CA7F7CC42ADC90A3C971F8542D3A85688
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27B6D4AD0011F8020D9A7F370831741FEE19274A

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jaarrave.default-release\cache2\entries\27B6D4AD0011F8020D9A7F370831741FEE19274A
Size 90KB
SHA256 aeb524dcb542f384973b309c01d2d785362dcb61f122f1fdc13b65e7d43c48b4
MD5 a47290feaa7e7edb24dbf55df9319d63
SHA1 a3120339c8480e8f5a077a9d3dcc74a40c270e65
SHA512 c6524e530cf5f72f562e157d5288d1e1bad80fdff0a6ef4f0d965d23ef8d1ab274303ec4b5e4dfc2776e0c553d58393d022a21b064e0dbe89308279212a89835
SSDEEP 1536:UPhXEIWXlesYLd/A4PFAv6A9uAT8AqQXaYawUgrpEZY+:lo/A4P6vEAQAowUgrpEZY+
TLSH
T17693B537FF648A12D95803B188B727353F35E14A5B87E70FAA8A71273C0A3A95C915DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4B3AEE5C62DE423F37C5D6420B9495199AA5E1F0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jaarrave.default-release\cache2\entries\4B3AEE5C62DE423F37C5D6420B9495199AA5E1F0
Size 14KB
SHA256 e8eeb1bac939e2338e4127bfcbc623d975c796b53b4dc5a6ef756e7df67e2c4b
MD5 55fb4d7e4debfcd1a2c01bdf0ab7c053
SHA1 18eb032b2366e44a4b09234cda41af9f7fb239a6
SHA512 598392f65dbbe5e1caa5760f9c84005179aa8238f6fd709b1738ea2a581b4cfc61d00e4257d391517f62139064f9cf3d17ed820da0801bd99c3548b350fbdbfe
SSDEEP 192:74PNxhDpbkxLIO4Xg+R6ktzufafGaJqlQ2W8hvBsy0JYBn4ffyUBlWlOdyFuwUyA:qhlbrJrqo8hvj/4HtBzyFWj64
TLSH
T16E62AF7AD6446D481F81FA52C81A1B5A1D0AEDC3D2CA82EC958D3AE60BC4B6C25853DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D5025DC6504CA582007380035E66622D374685F7

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jaarrave.default-release\cache2\entries\D5025DC6504CA582007380035E66622D374685F7
Size 17KB
SHA256 ad6e944064fa0433b1a3b59c124fbf224be1fdb56bd493f0ccc55b5106038fb9
MD5 fe21a1bff81ec5e0c4047bad892f99f9
SHA1 ec3c4fbb46629605b168f4f5939e25033fea9a4c
SHA512 cead21af53cc3ca1d53a8199c78ba6b731db9fe2c750c9f5e1c67770213c5bdcac1422525999203de48b7aa6ffbf6e51d2f6f7d244f965ddcd261ebfc6b63516
SSDEEP 384:cZrST7DRDsAs85ThGJmZI0Xb3flmiSsy8D9Gpo/VMAkK:cshNv9kzwb3flSsy8R8o/VMg
TLSH
T15982AEB63F9839851B11CB41DC7B291D4D3A8967FED7A1FD6805BA829BCCB2C0E40C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F99ABE0BC8DDB023B60DC1797DE2F080BEB11A59

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jaarrave.default-release\cache2\entries\F99ABE0BC8DDB023B60DC1797DE2F080BEB11A59
Size 149KB
SHA256 6016bef65d0a29485a02061b62aa7394da6a297da5b619c678e2a78378118d65
MD5 0841d5514208ca98cb035089653852dc
SHA1 c666204c7722638020330df969f703f01fadfd36
SHA512 42a307cf0781b38b0a611bbd1d17b2229cf11e65bcae4f68da26d3970bb83f3c568b98c91a0cc3175151688e0e249855a3557d3312409c2477d9d43cff75a23b
SSDEEP 1536:gmSt+riCfUoNla0kQrDZCuh4M6Rlgqm4MRjVaPH1x3gZTAf77rb4:mqi0BCPH1x3gmf7Hb4
TLSH
T10FE31966A640663BE25E13B564CB252C727266476FC2F37B4ECCBC792C9027E3C01E59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jaarrave.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 d9588c071a61847c7f9040358a3ceedba48ade15d0b1de69c9d27ef24ee168c8
MD5 a455b10b660fea2a709850175c185aa4
SHA1 4b26248687a9115816099760ed7df626a267e370
SHA512 3818251c770f272bb192727600ea2c2a38bc345483ea2688d8a1738f1f74cc72baf43902efc1847e4ff66155d58443701a618f2e01de3098582ab257869769aa
SSDEEP 1536:jTrlikEv6DPHCpO06gI+cxj2grPdILTNEOHxdUdBpm/xthFc7ndYYYK8cUtbaSe/:j3lJCpO6gVSb4Upt+5XuKbac
TLSH
T114B3AFF6DF938969A5FFD02DAA82C43FFD232410B3E33009C923665561C6FB46679648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

H9FIBKC5LDQ8RPKIWELL.temp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\H9FIBKC5LDQ8RPKIWELL.temp
Size 12KB
SHA256 afe75d61c4f40e64d2e7f2312eda71a58465c257fa607edce88925eb517cde22
MD5 a8561ae6c137666ae498cf2d5f3ee481
SHA1 37ff461192ca7e266631e65e36ed1c418c83fc52
SHA512 212676b893ffd156131115385210fa50eb264f2953e8caea058b3dd63f590cd88ce74d18075987cb9c5664fcd2190fef36267d0f545e262d313b1329bdd6b2b6
SSDEEP 48:5vdPJ5UgdwK4bgzUMdPJ/6BdwK4bYUqdPJ/adwK4bal42dPJP6dL5Ui6m29iZ5VR:9FJ/iR/yVEEm2sEm2ugXRrM6ns16MI6L
TLSH
T1EE422F0117FA0599F1F3D675BA7177036A33FD024E07965E8181A38E0A32760CAAEF67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\AlternateServices.bin
Size 59KB
SHA256 8ea1ac79512f099494ed6e7bf3b9950edced038823616e3bb1950e248a3ce26d
MD5 f2841fd748938e7edad0d66d3a30f287
SHA1 58cb4d6a6ce5042b57808ae203f3280f6ccb601c
SHA512 3b390f8bfe5fe7285f35b84e8f96f52855ebd899f7a96356876c21d63766861a460c27accefa55b05232060c12d0890798b0b813cc4a6ae68848af4abad258fb
SSDEEP 96:6fzTAKCVKkKbtChEboWUC9kw3GCsGbGwmCMJ0MRFZu8aRWeyCEzWhlrCTypwMJ8I:1XdRJ/PZi36jteUqAP6EAs34Pqtr5CQ
TLSH
T1F943A6EB8BBB6955F0737FF144AA74888C6337167894D5C89A04E0DA02517A8F07FF98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\AlternateServices.bin
Size 10KB
SHA256 4e178706e9d8c882c7905e8c932a7d7090adfe97ad0c80c2b65b18cdacfe6dcf
MD5 064dd5ff1ec251fe4791270ff6b659ec
SHA1 a1dcb5d0c6ea65698229e28439a89e9422d925d6
SHA512 ad523f18a446f9a332626ac644ff36df6713392d9dffb45937ec025a2daee9d76b04231ad311985abda044f212e51fa6fbc1e3fcee8a6f65483b0b6b0eeb2b88
SSDEEP 96:VKJmQr5KCVKkKYkChEYBtLUC9kYAGCsGbGj:0BtXdf
TLSH
T15B2216EB57BFA521F0236FFA449534499C37371538A4A5D49E14E0AB02422E5F0BFB88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\db\data.safe.tmp
Size 102KB
SHA256 49006fa711d5b8bdc432a73f609927b1c01bde563df72cf428a96d283442d681
MD5 43c373e4e92daf392beb3af7c74b70c0
SHA1 a8fd7b86fe6586b766f671ba08b03717f1d003d8
SHA512 6ec0658c9800febc5c01c4700b40cf5fcef970c2d667859effd916c013e2b38b3a55fdb2e732efd0a68f38a85cc3cd12a9bc54b6efc7e355d8bebbf89cbd5e22
SSDEEP 3072:zxG6czr8lfNIR+smsOlK2yGnZ+d3MmoGlL:zxjczr8lfNIR+smsOlK2yGnZ83MmoGlL
TLSH
T12FA33384EB1A503FDC2802BAA8D617143B35F8994B1A6B5B376C54353CC73EE2D4E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\db\data.safe.tmp
Size 92KB
SHA256 01c76f236c9bc0ba0bb99a8ce531676abfff730febb109f95ce8007a0910983f
MD5 b0830e0f5156962e25cfb4085f048ce6
SHA1 dac7cc0c90eed59198ab491c12cf1947d2952d82
SHA512 14c8a3249f0d0ab3df5d4f52d7f3d3cb0427fb3b675774d342eb1b312ba520e926aae19fe672094b30fda5ba2a7a57bc0dc62cee7782c403982b9699e1f42be8
SSDEEP 1536:uxfeVgcCDIr8LJOqNIRhE2SukPRnR6OO8fC+nPK2fUkpyG+MMd5unAUE94tGKb:uxG6czr8lfNIR+smsOlK2yGnZ+d3Mmo/
TLSH
T191930045EB5A953BD928137A9CE21B103F78F88D5B1A2B57271CA4343C873DC2D8E16E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 4bdff7411a3e50704c20cd1b7ee8b828ba8c2e84c1636503626278b1c25df59d
MD5 2eacd5aaf2606c7d8879a0f5c06c6ff7
SHA1 62d0980aa27b0c1a150ad610ad47ee73a8182438
SHA512 d26b5d906009569944601f53ee16fd540a47a7f625a12f53aeffd6628608d34b0cf539bda83942895356646c78bfdc80269c0d41162f345267354a65283ba87a
SSDEEP 192:I1d66JozGzgCl6mc0d8Ov5zbojbmlyjQ+o:id66JozGzgC1jBbojbmlyj0
TLSH
T12AD13CA8FA28863FD449523BCCA60B050F3538AB9C4E3F1931DD650C2C4669E768E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 ebc2eb379f67c10f080d6fede54d40efe3ada8b5953c6036e42521ca7ffff632
MD5 0d5ca4ef5be29aa190a448131847be14
SHA1 f71fdff71be052300d106abad0a7afb8290c3193
SHA512 c1f8dd69b50578f2486254f7a8056eb322f0445dda64aa70f704b99397bee2a46f3199febca8e95cbb77f097e374839322f11309d294fbc53a9b3b000e7965de
SSDEEP 192:I1d66JozGzgCl6mc0dyOv5zboP6ZmlyjQ+o:id66JozGzgC1jvboiZmlyj0
TLSH
T1DFE12CA8FA28823FD409527BCCA61B450F35389A9C4E3F1931DC700D2C866DE368E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\events\events
Size 1KB
SHA256 a09059a53bd116c19c178e842c8d3fb89a45a74b690c5f4df685f885aa330650
MD5 6a0a3109e083ea48f850a1aafb9263df
SHA1 fab30ae852f3a34ad61782cf64053205339f5d2e
SHA512 fc22ec983024db726f0df27237ffee6591b3bab31706d6ebbc012b522f7e5e3f8d8dd3a32c2a068bd5da90e2380ee0bf912b8ab99dec41bde23c0f7e5f243eb2
TLSH
T19E21798C7EB84D2E98C7F7AC7482028E53594E0614871C4B0D02EF8DCED2AD9726E43D
MD5 SHA1 SHA512 TLSH

Submit Download

0af7fe59-dc7f-4bc8-b716-af7786e4f87d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\pending_pings\0af7fe59-dc7f-4bc8-b716-af7786e4f87d
Size 931B
SHA256 a3a14a57a6019d73b0bfa9e1bb72059a3e291ab53c40d98a31210e51fec8ba5f
MD5 2999f0be9bb39c95bc29aa4f9ecb25fc
SHA1 d283f3a8ab6cfd13d4b6b94855416f6236e1ecc0
SHA512 a46995061c3f535710d89953ad33ce14c8755dfff179df4df0bc590ec28ba8dafac3dea481fd5942bb32a2f3656c4e15a59f69898359bcaa996895780a5e4955
TLSH
T1321188C0A62474B39CFDD2DBC4F4370347F0652380C609087D901B180CEA61E9327707
MD5 SHA1 SHA512 TLSH

Submit Download

26868153-1007-4e7a-a382-5fc3ce6d513b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\pending_pings\26868153-1007-4e7a-a382-5fc3ce6d513b
Size 280B
SHA256 57f6b227979d5ea5516cc15d94a1d6ea104e2961f471b4fae707fa2e8244c2c6
MD5 15baa4d8ada305292b12ae757e3a78c2
SHA1 5921f715d7bc546a5e5f5a4c1f45483ab6122a92
SHA512 aec179db432cfc7edd3614d2156eb9baf07c544887e53d6ce874b830fde5d3e9518946dfbe7d8dcaac1da3d21752e8827840044d3fe9342ab38082350c96bc07
TLSH
T11CD02BD128D8376D4C284F2BB1F469E731654C3350E1D850D9E1C57859FEDC84161C17
MD5 SHA1 SHA512 TLSH

Submit Download

7b0f50aa-aae7-4e97-ad49-373d2ead112b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\pending_pings\7b0f50aa-aae7-4e97-ad49-373d2ead112b
Size 883B
SHA256 6e05f3a4f830484a52866d66986aba8185a6b42c6cfad5881a8cf820e4a9106d
MD5 dae04c3d307dca9c80d9cc3bbcdc0323
SHA1 efa84047dba6b667f1649a642fc2b4076c4da39d
SHA512 622b7d11f970766bcdc01fe710af277344c75723ee4afcf695c83d11152c7904ebfff789f116e803a6fd6f0fce8fbe9f5bd9dfd63f58b1d3f13b983b630a4acd
TLSH
T1D4112382B738B9F3CCB9D25F895537038BF4792380C651183DF15A190C7AA2E632B60B
MD5 SHA1 SHA512 TLSH

Submit Download

9cb7156f-7f9e-4df2-88bc-5a697bdaa608

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\pending_pings\9cb7156f-7f9e-4df2-88bc-5a697bdaa608
Size 16KB
SHA256 93ecd503e0c089d7ea134fea17aa299e1d5aaf7496b7bdbfbaa4012b1d40fa33
MD5 d5900a1860b6867eda7de43358741257
SHA1 b9743ea18a0b99d0e1a5006032d3c6ebf1ecac5b
SHA512 cc9d278fbe9a8fe62c6111473ec4692c50c45bbc47882218269a07e7145e0c91d41036d4b82cd3a8d698ac80d3a4244d70f041d493a6b7d55b6fb9c3364c834e
SSDEEP 192:GoRmI1IUBRmImZcSE+TiA7XV3J+r+A4qPobJcAlzxKRj+1u1dLcCP4l5rK4eJ2Yv:JIUGlQdAR3J+CA4gobWAllKRjCk
TLSH
T1FB72D956682045BA8251E368D8F87FC3E6F52CCF4C418FCADBE4BE0469DA06E112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b46c4d8f-d350-4545-bf08-913f162517dd

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\pending_pings\b46c4d8f-d350-4545-bf08-913f162517dd
Size 5KB
SHA256 9deccc6ee8eac848f4cac2ebc5feb90be8d7d733bd5ff1e98954f48365680cd2
MD5 99392dfc9980eef642569edc0a7e423f
SHA1 b4bb1ff2dd011542e0aaa828acdae16d97f071cd
SHA512 04721471d250e4e1cd14c70a72e35bd5e1f4c50127ab8606e562f8a96b2e8f7ab50a76bff8706025bce5bbf9c26f660221f1d6f63877cbb202bd07ae2767a8a1
SSDEEP 96:cxvcNbfUOBG/fy138QIq0dqvovKBPVhf/fsP/eyLypN6fx7V1c487ZuaWNsw/+vd:qvChA3rAR/aVCd
TLSH
T1D5C10BED9A22014A3C25C51E73A6966B35472833499CC68E6FFC043A0EDA97F466336D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d2307f15-117c-4f28-8a20-fa5326426ad3

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\pending_pings\d2307f15-117c-4f28-8a20-fa5326426ad3
Size 2KB
SHA256 3b13afdba424315ba4ad73f389549c166e22c39a3b1c978e7491e64b57032341
MD5 3853d503afeb3f80408147dee62d555e
SHA1 4897acec0e67f0894d63c2b6df249872cd493944
SHA512 206006b3a54849fa3e5882e1bccf8963311970a646a85c475f53a8e7eb9a13ab02a6156183dff4ab1986afbe40c7f48d576182e3fe5cc7f716670111722a95a0
TLSH
T1D541105C35789DB75DDAF29CD482239E57648E0300C22C436E91EF1C8CD97AE236A53B
MD5 SHA1 SHA512 TLSH

Submit Download

f8bebd5a-689f-4065-b3c6-917f3a77f909

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\datareporting\glean\pending_pings\f8bebd5a-689f-4065-b3c6-917f3a77f909
Size 235B
SHA256 baf5faf66ae2c2cbc5583414f9a79d5c9fca482618c71709648b91241eb8c71c
MD5 0a6ca9c3cb21957eb6cf5ab183700964
SHA1 753538b24ddf94995ec5ca17f96ed13beb6b655e
SHA512 3a8f5cd2e4113de072fa331175200e9eb4221afb1c4751d14eefe8126ab3fcaa26250d17a8fd70d2fd25d293f78c44ba24923f32324e845ac54e9e0466b04dd1
TLSH
T11ED0978428A8672D08080F02F0E06AE630588C332070985086A211388DFC9C80262926
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\extensions.json.tmp
Size 16KB
SHA256 2601eb4a731d54535435842f9a20efa435fb7c968219e1cd66f459900eb88912
MD5 972cb3f61a28d74c772415414505fe58
SHA1 df7d3d6f1c72f9cc9d60a6f508f36be3dff873ef
SHA512 d051b4663c3a2a8c3472a7e7379f31c35486dde7cab6ee2eec5344635acfb2d8ba97551cf9362749136519dfc6227c84ed7d539c6c77c23fbcd7d954c71cdf11
SSDEEP 384:okI4v2UmldvV8dhWk94zH96oLL4HkL4PRL4HgL4HuL4HSi4hV:/I4+RfmXt4Z644e4R4i40494j
TLSH
T1A772531545049EB8298F979BAA367E02C37D473B60845C78F4DD8FC802FB5B902BB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\prefs-1.js
Size 6KB
SHA256 1a7f097add84bfc2763a6bf9a34a82e0029f09d978035b33dd6b55308a4d8119
MD5 6a8c74b562a0b4b7374c2b0c07ae6687
SHA1 1bfe29bcae40f0aa5b40c862978496f0e96de4dd
SHA512 4fecfaacca8e9f974dd8e12c9b90bec1d57f73067751ce6c97b7870fd33fd17339e76fa552cdf425c74413e8b698d4c5fc1d85d1fabc9d64a2aaa67c1ae22573
SSDEEP 96:xHBUTUxVqGq5fgAtObzSr/SSlWdv9jUnqH/8MBw88n8L4cn+wGC:HyR5fgAtNSS0dBw88hC
TLSH
T147E120789518CB7F64B6766CAC6888715AB2013B77BF28D710B654C8051CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\prefs-1.js
Size 6KB
SHA256 ddc4356f1c340f1ed4b8d35e1191b9fcedb08f460fa2fa2841848b855bf4019f
MD5 cd9da2eae5a57a8bdd0ac84f5337752a
SHA1 a6bb2c5b16c273c4da1a0463c9a4f273f9474476
SHA512 ca7825c636ab2ea018f4bd225ff4f42723c85522081737e12a479067426ce7b87b3ec326ec789a6d61f8afb1ca2490903f331943f24f7a59f3f451703e76642a
SSDEEP 96:xHBUTUxVqGq5fgAt1zSr/SSlWdv9jUnqH/8MBw88n8L4cn+wGC:HyR5fgAtCSS0dBw88hC
TLSH
T171E120789518CB7F74B6766CAC688C715AB2013B77BF28D710B65488051CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\prefs-1.js
Size 6KB
SHA256 6443f347424f77ffd48019dae565091491a47bbbc161b27ea9a9493ffd50cdf8
MD5 81549ace3eeac7f4b52430205ef64330
SHA1 9cb5b3917b4bf52999a23a776dd7641df6f88e6c
SHA512 b82897c20612b28726f0629f7f8b6c1213141bee5ed65f2a7d8e86af57effd470baac60327b03a04d6c8c1b997b116f7dff8cb34aeb7b2bbbe4080172448b0ee
SSDEEP 96:xHBUTUxwPqGq5fgAtObzSr/SSlWdv9jUnqH/8MBw88n8L4cn+wGC:HSCR5fgAtNSS0dBw88hC
TLSH
T1AEE12F789518CB7F64B6766CAC688C715AB2013B77BF28D710BA54C8051CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\prefs-1.js
Size 7KB
SHA256 020428a87b25378bc98ca5451269838d0f44d9cf33cb5b1a5bc188b4731e7de9
MD5 80b0722cd7d1a29e0c6bea1f6ad41c4c
SHA1 4b9e1d458b66fb704e9d339f0cb24869549c45b3
SHA512 d4bc0d47497549f573cf5e1dc10ea965e06829551f7cc3ff69fdf94e9a8fdbf0f56ae0c0ee23ecd814f5086cd79f86388bac087f0d8f38c2ba6c73411bd5de7d
SSDEEP 96:xHB1TUxwPqGq5fgAtObzSr/SSlWdv9jUnqH/8MBw88n8L4cn+wGC:HvCR5fgAtNSS0dBw88hC
TLSH
T13BE11F789508CB7F74B677ACAC6489315AB2013BB7BF68D610BA54C8051CF3841F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\prefs.js
Size 6KB
SHA256 3eb2c7c7348d2344bf35495933b4bd73d530f59aaa65660d068a8eaf9dbd3245
MD5 c82f366ddd1abfc23098255d1697c5ba
SHA1 94f4be461239be9db40c3d57bcad701324b56f3f
SHA512 a9487f30d1aa8505d4edfa6b6b6653a1ed6cd9bd2348862351077f26289c8308fad6206a5fc98283899d991365b7b1c9191e67043e62e533f512a054ca2134d5
SSDEEP 96:xHBUTUxVqGq5fg9o1zSriSSlWdv9jonqH/8MBw88n8L4cn+wGC:HyR5fg9oOiSSsdBw88hC
TLSH
T1FEE120789518CB7F75B676ACAC688C715AB2013BB7BF28C710B65488051CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 02940ca470b2379d36123e98d6a7db362ef6e5afc222026d403c9b1ad427073e
MD5 d1fbcfde022f86abe09f6f438fbece55
SHA1 314205c29e427e60f35bb71d2ed6b16753a0202e
SHA512 9b8b56568e6c383c329f6922d92ef54fc0f19fbc6ef53e2fb1f215043252953362be839c38334883a56bf485554119d6495777a934192ef298e573d4820bbfcc
TLSH
T1CB717B87C242ACC0FF6B72D8D44AC5E8C15A341289CC99D0CA698E01B7C7160EA9E22A
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 b5f0a8f637455a2b5cc66cb1ca4e78caf0f89321c344e33fa87f124dea60fe32
MD5 0a460dda2d8013bc372d79c6f9c72ad3
SHA1 5a831a34d6dab30aadc07c26efb5455130847cee
SHA512 4c1e9ae0c68ed6969e54b80c64268699bec806215d6b638f654a25de9dd8bb03561d88b5aca8817d66ce2113a2070abf4459fafa1db70406d566b3993bdb2291
TLSH
T176716CC7C152ADD4EF5676CCC40AC4E8C12B3C1388DD6CD0DA5A7D01A7F7154AA8D63A
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 ed7bf8d364bea6721af8ac58388462bd145480ad839982e5ba13e4fdb431ccaf
MD5 d3dc773533e04ef409fb9b6e5e2dd9a9
SHA1 b51ed132f2938d179f51df6bb32d831b1539c542
SHA512 417e13cc79e5d97b6e1a38db556bd6bdebed4193d7957b8c85dc349558f08685a19ceba56bd00942089b051db603d8c950dcfac7f7d267bf4cee4d9a73dbcb43
TLSH
T15A718C87C242BCC0FF7B72DCD44AD6E8C157341288CC99D0C969CE01BBD7160EA5E22A
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 1ce9956a09005882b24f0493caa74750eb5a73c86d8a30059913fffd80e1ec63
MD5 9bd0630c5ca2025ee5a1e10bb3897624
SHA1 ce65ee41653d2d89ab78f362de50747f1a02019a
SHA512 fc427a3fabada7a0edbca489724cc37240213fca1447656fb130ac47a3571633612e2edff3090c95db28a12da4c7597092c78d42732e29c696e394f072c15d96
TLSH
T1A6717C87C242ACD4FF6A72D8D449D5E8C156341285CC99D0C9698D01B7C7160EA5D22A
MD5 SHA1 SHA512 TLSH

Submit Download

3619099707vealluiddoamt-es-cbir.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jaarrave.default-release\storage\default\https+++gamejolt.com\idb\3619099707vealluiddoamt-es-cbir.sqlite
Size 48KB
SHA256 bb997e7c418894732d7d603a43626213709fb850d8c255ff96985133028f54ba
MD5 25d88ea1253d31340eced4cf36d0bc5a
SHA1 50742dd061c58eb8a5eb07709742174b35379ec9
SHA512 9af46dfc0008062b433c22a46fe964b9b6d6a275789a10d1dbbf96bbda90b39b5d81402438859489232a5c103ee70b7ff93e6e63402e73c207e982803061c927
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEZ9C:Oa16S6CKnqlizbxV+2xVeU7X2B0+
TLSH
T1C7237E8E3F07B511C53AB0B178A08D51FC5E321D07222AD57990DAE4C8F211AEE5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/7788-2192-0x0000021A6C860000-0x0000021A6C870000-memory.dmp

Download

memory/7788-2160-0x0000021A6C970000-0x0000021A6C980000-memory.dmp

Download

memory/7788-2191-0x0000021A6C970000-0x0000021A6C980000-memory.dmp

Download

memory/7788-2161-0x0000021A6C860000-0x0000021A6C870000-memory.dmp

Download

memory/7788-2157-0x0000021A6C860000-0x0000021A6C870000-memory.dmp

Download

memory/7788-2156-0x0000021A6C970000-0x0000021A6C980000-memory.dmp

Download

memory/9736-2289-0x0000029EF4BE0000-0x0000029EF4BE1000-memory.dmp

Download

memory/9736-2287-0x0000029EF4BE0000-0x0000029EF4BE1000-memory.dmp

Download

memory/9736-2288-0x0000029EF4BE0000-0x0000029EF4BE1000-memory.dmp

Download

memory/9736-2299-0x0000029EF4BE0000-0x0000029EF4BE1000-memory.dmp

Download

memory/9736-2298-0x0000029EF4BE0000-0x0000029EF4BE1000-memory.dmp

Download

memory/9736-2297-0x0000029EF4BE0000-0x0000029EF4BE1000-memory.dmp

Download

memory/9736-2296-0x0000029EF4BE0000-0x0000029EF4BE1000-memory.dmp

Download

memory/9736-2295-0x0000029EF4BE0000-0x0000029EF4BE1000-memory.dmp

Download

memory/9736-2294-0x0000029EF4BE0000-0x0000029EF4BE1000-memory.dmp

Download

memory/9736-2293-0x0000029EF4BE0000-0x0000029EF4BE1000-memory.dmp

Download