Overview

overview

8

Static

static

3

agent.exe

windows11-ltsc_2024-x64

8

Resubmissions

26/06/2026, 04:33

260626-e6wwdagy6w8

25/06/2026, 22:26

260625-2ck84sgs2p7

Analysis

  • user interaction
    yes
  • max time kernel
    1050s
  • max time network
    1054s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260617-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    26/06/2026, 04:33

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    agent.exe
  • Size 8.3MB
  • Sample260626-e6wwdagy6w
  • SHA256 3e05800f04a3a72fc5867cf0b2707092476c69cc2e67a74aa115805f6a014fc0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarepersistenceransomwarespyware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Executes dropped EXE 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Contacts third-party web service commonly abused for C2 1 TTPs 11 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Drops desktop.ini file(s) 3 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Looks up external IP address via web service 9 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 64 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 41 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 58 IoCs
  • Suspicious use of FindShellTrayWindow 62 IoCs
  • Suspicious use of SendNotifyMessage 50 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\agent.exe
    "C:\Users\Admin\AppData\Local\Temp\agent.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5768
    • C:\Users\Admin\AppData\Roaming\WindowsUpdate\My Agent.exe
      "C:\Users\Admin\AppData\Roaming\WindowsUpdate\My Agent.exe"
      2⤵
      • Executes dropped EXE
      • Adds Run key to start application
      PID:5048
  • C:\Users\Admin\AppData\Roaming\WindowsUpdate\My Agent.exe
    "C:\Users\Admin\AppData\Roaming\WindowsUpdate\My Agent.exe"
    1⤵
    • Executes dropped EXE
    • Adds Run key to start application
    PID:1720
  • C:\Windows\system32\sihost.exe
    sihost.exe
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Windows\explorer.exe
      explorer.exe /LOADSAVEDWINDOWS
      2⤵
      • Boot or Logon Autostart Execution: Active Setup
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:6052
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe"
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:6012
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe"
          4⤵
          • Drops desktop.ini file(s)
          • Checks processor information in registry
          • Modifies registry class
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:712
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1964 -prefsLen 27097 -prefMapHandle 1968 -prefMapSize 270279 -ipcHandle 1940 -initialChannelId {09a9c38c-b0fb-4ad1-87f6-8f5decf86d7b} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
            5⤵
              PID:4068
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2420 -prefsLen 27133 -prefMapHandle 2424 -prefMapSize 270279 -ipcHandle 2432 -initialChannelId {a419572e-7426-497f-8ce7-5443c7951f18} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
              5⤵
                PID:4324
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3836 -prefsLen 27274 -prefMapHandle 3840 -prefMapSize 270279 -jsInitHandle 3844 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3852 -initialChannelId {eb91b5b6-8873-4a95-b774-1931d39b86ff} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
                5⤵
                • Checks processor information in registry
                PID:4816
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4004 -prefsLen 27274 -prefMapHandle 4008 -prefMapSize 270279 -ipcHandle 4024 -initialChannelId {81917ebd-ee5c-4f0f-8559-4b2ad59d423c} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
                5⤵
                  PID:3780
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2924 -prefsLen 34773 -prefMapHandle 2852 -prefMapSize 270279 -jsInitHandle 2876 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3172 -initialChannelId {688abc5a-4e49-4061-b9cb-d89ab11a8511} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                  5⤵
                  • Checks processor information in registry
                  PID:2916
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4988 -prefsLen 35010 -prefMapHandle 4992 -prefMapSize 270279 -ipcHandle 5008 -initialChannelId {cf0e798e-d9fc-4ce2-bc6f-ac3a7a6d4394} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                  5⤵
                    PID:5200
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5736 -prefsLen 33031 -prefMapHandle 5740 -prefMapSize 270279 -jsInitHandle 5744 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3116 -initialChannelId {3cf15939-59fc-4a0a-ab18-c34ba672f125} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                    5⤵
                    • Checks processor information in registry
                    PID:3288
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5920 -prefsLen 33031 -prefMapHandle 5924 -prefMapSize 270279 -jsInitHandle 5928 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5936 -initialChannelId {d5f6fe83-9a93-407b-97ce-258fcc255e12} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                    5⤵
                    • Checks processor information in registry
                    PID:3820
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6088 -prefsLen 33031 -prefMapHandle 6084 -prefMapSize 270279 -jsInitHandle 5716 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2980 -initialChannelId {97d19775-bae0-4ac4-b98b-01aa72b8e216} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                    5⤵
                    • Checks processor information in registry
                    PID:1408
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6368 -prefsLen 33031 -prefMapHandle 6372 -prefMapSize 270279 -jsInitHandle 6376 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6592 -initialChannelId {09a74b55-9765-414a-ac1f-f38ff6c0d86b} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
                    5⤵
                    • Checks processor information in registry
                    PID:3236
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6828 -prefsLen 33031 -prefMapHandle 6832 -prefMapSize 270279 -jsInitHandle 6836 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6844 -initialChannelId {9efcec39-b16f-4f56-9c98-0cde1fa6fc31} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
                    5⤵
                    • Checks processor information in registry
                    PID:6060
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7148 -prefsLen 33031 -prefMapHandle 7100 -prefMapSize 270279 -jsInitHandle 7108 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7072 -initialChannelId {1395db8f-095d-4955-931c-166138deb9b3} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
                    5⤵
                    • Checks processor information in registry
                    PID:4656
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7320 -prefsLen 33031 -prefMapHandle 7316 -prefMapSize 270279 -jsInitHandle 7312 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7368 -initialChannelId {d2814b70-d756-4100-ab4a-9922cf6f22e2} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
                    5⤵
                    • Checks processor information in registry
                    PID:1008
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6860 -prefsLen 33031 -prefMapHandle 6136 -prefMapSize 270279 -jsInitHandle 6564 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6160 -initialChannelId {05729a84-34f3-4dc3-b9f4-25e449e2ac1e} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
                    5⤵
                    • Checks processor information in registry
                    PID:5072
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6168 -prefsLen 33031 -prefMapHandle 6600 -prefMapSize 270279 -jsInitHandle 6220 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7104 -initialChannelId {fd143e6c-4ae3-405b-a5a1-bd2582ea5c98} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
                    5⤵
                    • Checks processor information in registry
                    PID:5004
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6300 -prefsLen 33031 -prefMapHandle 6292 -prefMapSize 270279 -jsInitHandle 6312 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7320 -initialChannelId {f14d0f55-3eab-4ef6-9dbf-cb0666262e25} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
                    5⤵
                    • Checks processor information in registry
                    PID:5660
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8544 -prefsLen 36845 -prefMapHandle 8420 -prefMapSize 270279 -jsInitHandle 8424 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8416 -initialChannelId {4ca740ca-9fd4-4a43-ac4f-e768f67c49fc} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
                    5⤵
                    • Checks processor information in registry
                    PID:6888
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8752 -prefsLen 36845 -prefMapHandle 8756 -prefMapSize 270279 -jsInitHandle 8760 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7920 -initialChannelId {6ebdae6c-541d-4f8f-9441-c5c8372ce426} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
                    5⤵
                    • Checks processor information in registry
                    PID:6896
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8760 -prefsLen 36845 -prefMapHandle 8596 -prefMapSize 270279 -jsInitHandle 8616 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8624 -initialChannelId {dd72f761-65b4-4463-bd2c-e342c1e82f3c} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
                    5⤵
                    • Checks processor information in registry
                    PID:3168
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9052 -prefsLen 36845 -prefMapHandle 9048 -prefMapSize 270279 -jsInitHandle 9044 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8096 -initialChannelId {362fe594-b834-4c92-a9b8-222b0ec03e6c} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
                    5⤵
                    • Checks processor information in registry
                    PID:6228
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4836 -prefsLen 36845 -prefMapHandle 7784 -prefMapSize 270279 -jsInitHandle 6204 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7580 -initialChannelId {b7411036-7218-4a60-a860-6cc8fe5386a8} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
                    5⤵
                      PID:6760
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4668 -prefsLen 36845 -prefMapHandle 6996 -prefMapSize 270279 -jsInitHandle 7028 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7188 -initialChannelId {c9637b81-a7a0-4f63-91d1-69d143151f2d} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
                      5⤵
                      • Checks processor information in registry
                      PID:6768
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 2792 -prefsLen 39982 -prefMapHandle 4688 -prefMapSize 270279 -ipcHandle 3196 -initialChannelId {f419a88b-6ca8-4f43-84b6-cb3e8d242cdd} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 23 utility
                      5⤵
                        PID:6024
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7648 -prefsLen 36845 -prefMapHandle 7632 -prefMapSize 270279 -jsInitHandle 7636 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7624 -initialChannelId {3d01c14d-b5d5-401e-af61-7d6d880c0052} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 24 tab
                        5⤵
                        • Checks processor information in registry
                        PID:4560
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7564 -prefsLen 36845 -prefMapHandle 9076 -prefMapSize 270279 -jsInitHandle 7044 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7556 -initialChannelId {7252762e-aa56-42cb-88dc-e92a72bb9728} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 25 tab
                        5⤵
                        • Checks processor information in registry
                        PID:6100
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7632 -prefsLen 36845 -prefMapHandle 7644 -prefMapSize 270279 -jsInitHandle 7660 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6812 -initialChannelId {d6aeb663-9d99-4c00-b23e-682054e00faf} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 26 tab
                        5⤵
                        • Checks processor information in registry
                        PID:6828
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8596 -prefsLen 36845 -prefMapHandle 9204 -prefMapSize 270279 -jsInitHandle 9208 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9316 -initialChannelId {a0d4929d-dc5b-447a-849a-9821bea2cf1b} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 27 tab
                        5⤵
                          PID:6836
                        • C:\Program Files\Mozilla Firefox\firefox.exe
                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6552 -prefsLen 37005 -prefMapHandle 7172 -prefMapSize 270279 -jsInitHandle 9696 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9276 -initialChannelId {61a5cf1a-f0d6-4067-a69a-3bc4d7cefc02} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 28 tab
                          5⤵
                          • Checks processor information in registry
                          PID:2156
                        • C:\Program Files\Mozilla Firefox\firefox.exe
                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9772 -prefsLen 37005 -prefMapHandle 9092 -prefMapSize 270279 -jsInitHandle 9696 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8896 -initialChannelId {229e3a72-e7d0-47b9-bbcc-a2f101554dc4} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 29 tab
                          5⤵
                            PID:6488
                          • C:\Program Files\Mozilla Firefox\firefox.exe
                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7156 -prefsLen 37005 -prefMapHandle 8876 -prefMapSize 270279 -jsInitHandle 7356 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9280 -initialChannelId {e9400de4-b0fc-4389-81ab-6a4bb38bf3b1} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 30 tab
                            5⤵
                            • Checks processor information in registry
                            PID:6872
                          • C:\Program Files\Mozilla Firefox\firefox.exe
                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9500 -prefsLen 37005 -prefMapHandle 9060 -prefMapSize 270279 -jsInitHandle 5628 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5996 -initialChannelId {e7bf7409-a80a-40fb-a5b3-1d61a9bf4046} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 31 tab
                            5⤵
                            • Checks processor information in registry
                            PID:5092
                          • C:\Program Files\Mozilla Firefox\firefox.exe
                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9712 -prefsLen 37005 -prefMapHandle 9672 -prefMapSize 270279 -jsInitHandle 9256 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9748 -initialChannelId {023c42e8-514c-48e0-87b3-81d33ada7468} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 32 tab
                            5⤵
                            • Checks processor information in registry
                            PID:1248
                          • C:\Program Files\Mozilla Firefox\firefox.exe
                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9996 -prefsLen 37005 -prefMapHandle 5864 -prefMapSize 270279 -jsInitHandle 3032 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9760 -initialChannelId {eba50ad5-59fc-4602-ac99-39a987149dbe} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 33 tab
                            5⤵
                            • Checks processor information in registry
                            PID:1988
                          • C:\Program Files\Mozilla Firefox\firefox.exe
                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8172 -prefsLen 37005 -prefMapHandle 3056 -prefMapSize 270279 -jsInitHandle 10092 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8180 -initialChannelId {966c48ab-79c7-4041-98e1-65b71c75b185} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 34 tab
                            5⤵
                            • Checks processor information in registry
                            PID:6272
                          • C:\Program Files\Mozilla Firefox\firefox.exe
                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6460 -prefsLen 37005 -prefMapHandle 8304 -prefMapSize 270279 -jsInitHandle 6624 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5200 -initialChannelId {95b6d6c3-e77d-49c4-870d-5cf5ed3ed1aa} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 35 tab
                            5⤵
                              PID:1976
                            • C:\Program Files\Mozilla Firefox\firefox.exe
                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8324 -prefsLen 37005 -prefMapHandle 7088 -prefMapSize 270279 -jsInitHandle 7956 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7928 -initialChannelId {7fb890e7-834c-406f-82f7-7ecf74e29c92} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 36 tab
                              5⤵
                              • Checks processor information in registry
                              PID:2936
                            • C:\Program Files\Mozilla Firefox\firefox.exe
                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9672 -prefsLen 37260 -prefMapHandle 9068 -prefMapSize 270279 -jsInitHandle 9352 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4644 -initialChannelId {353aec41-9cd5-467a-bd94-ff1eef535b5d} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 37 tab
                              5⤵
                                PID:6180
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6436 -prefsLen 37260 -prefMapHandle 6404 -prefMapSize 270279 -jsInitHandle 9804 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8156 -initialChannelId {6e6c6836-59ec-445d-a349-230de653ae6e} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 38 tab
                                5⤵
                                • Checks processor information in registry
                                PID:4740
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6436 -prefsLen 37260 -prefMapHandle 9172 -prefMapSize 270279 -jsInitHandle 7600 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5216 -initialChannelId {b7d181e9-91e6-48ab-a5e9-d1f90bbb40ec} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 39 tab
                                5⤵
                                • Checks processor information in registry
                                PID:5772
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7936 -prefsLen 37260 -prefMapHandle 9180 -prefMapSize 270279 -jsInitHandle 7452 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6040 -initialChannelId {ede09590-7657-4e08-9832-342801ebe8e3} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 40 tab
                                5⤵
                                • Checks processor information in registry
                                PID:6072
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5996 -prefsLen 37260 -prefMapHandle 8180 -prefMapSize 270279 -jsInitHandle 3020 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9724 -initialChannelId {2c213359-8250-4df7-b246-92231a71d6e2} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 41 tab
                                5⤵
                                • Checks processor information in registry
                                PID:4556
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9792 -prefsLen 37260 -prefMapHandle 5740 -prefMapSize 270279 -jsInitHandle 7208 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9980 -initialChannelId {d6bd7d02-ec77-4c96-9396-ab7a78cded9c} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 42 tab
                                5⤵
                                  PID:3880
                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6168 -prefsLen 37260 -prefMapHandle 7916 -prefMapSize 270279 -jsInitHandle 9448 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9716 -initialChannelId {ce8d3c68-c00a-4fd2-92a9-f6bcaaa44f9c} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 43 tab
                                  5⤵
                                  • Checks processor information in registry
                                  PID:2888
                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7904 -prefsLen 37260 -prefMapHandle 8312 -prefMapSize 270279 -jsInitHandle 7912 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7416 -initialChannelId {125392bd-8548-413e-b0d0-e739b5137cc5} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 44 tab
                                  5⤵
                                  • Checks processor information in registry
                                  PID:3232
                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9368 -prefsLen 37260 -prefMapHandle 10088 -prefMapSize 270279 -jsInitHandle 6788 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8476 -initialChannelId {dee5ddab-80e2-421d-ba42-d39bb23e0d51} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 45 tab
                                  5⤵
                                    PID:1540
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9228 -prefsLen 37260 -prefMapHandle 9412 -prefMapSize 270279 -jsInitHandle 8020 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9740 -initialChannelId {d0a90976-e64c-4809-99b6-8effc4935c2a} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 46 tab
                                    5⤵
                                    • Checks processor information in registry
                                    PID:2748
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9236 -prefsLen 37260 -prefMapHandle 4644 -prefMapSize 270279 -jsInitHandle 9244 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8480 -initialChannelId {a25f6b81-8af6-4ecc-adf5-7748b7785fbe} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 47 tab
                                    5⤵
                                    • Checks processor information in registry
                                    PID:6328
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8184 -prefsLen 37260 -prefMapHandle 8668 -prefMapSize 270279 -jsInitHandle 5216 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4492 -initialChannelId {8fd1b9ef-d98c-48a2-b0ea-6824e72b09ad} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 48 tab
                                    5⤵
                                    • Checks processor information in registry
                                    PID:6428
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9308 -prefsLen 37260 -prefMapHandle 8156 -prefMapSize 270279 -jsInitHandle 9736 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6712 -initialChannelId {134e0561-a120-415c-be59-ab3e64635816} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 49 tab
                                    5⤵
                                    • Checks processor information in registry
                                    PID:2132
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7332 -prefsLen 37260 -prefMapHandle 4688 -prefMapSize 270279 -jsInitHandle 9324 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8460 -initialChannelId {a6684851-1040-45b9-8886-eea9f4698acb} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 50 tab
                                    5⤵
                                    • Checks processor information in registry
                                    PID:6236
                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5624 -prefsLen 37260 -prefMapHandle 6280 -prefMapSize 270279 -jsInitHandle 9940 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6984 -initialChannelId {bac7bc80-92ce-4f94-a95a-84b1ade2486b} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 51 tab
                                    5⤵
                                      PID:6952
                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6444 -prefsLen 37260 -prefMapHandle 7904 -prefMapSize 270279 -jsInitHandle 6372 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7928 -initialChannelId {05ca1467-a677-4d8f-8cec-b1d34132a6b4} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 52 tab
                                      5⤵
                                      • Checks processor information in registry
                                      PID:2772
                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10184 -prefsLen 37260 -prefMapHandle 5396 -prefMapSize 270279 -jsInitHandle 7088 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9200 -initialChannelId {0d9628a7-624e-4b3d-8eac-00e72d85117d} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 53 tab
                                      5⤵
                                        PID:3512
                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5412 -prefsLen 37260 -prefMapHandle 5228 -prefMapSize 270279 -jsInitHandle 6376 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6444 -initialChannelId {bb1e87e3-af9e-4881-8f71-92c1b8ecc6ca} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 54 tab
                                        5⤵
                                        • Checks processor information in registry
                                        PID:6176
                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7744 -prefsLen 37260 -prefMapHandle 6344 -prefMapSize 270279 -jsInitHandle 7624 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7528 -initialChannelId {0676ad23-2c5c-4591-baec-9f8709eac084} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 55 tab
                                        5⤵
                                          PID:3140
                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2932 -prefsLen 37260 -prefMapHandle 9488 -prefMapSize 270279 -jsInitHandle 9452 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9424 -initialChannelId {c1e77e06-5609-47fc-9400-f0d3b590f1e6} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 56 tab
                                          5⤵
                                            PID:4884
                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8936 -prefsLen 37260 -prefMapHandle 2932 -prefMapSize 270279 -jsInitHandle 8304 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8044 -initialChannelId {8d44173e-6461-46ad-8ff7-934c9f7dcbb4} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 57 tab
                                            5⤵
                                              PID:6804
                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7160 -prefsLen 37260 -prefMapHandle 2604 -prefMapSize 270279 -jsInitHandle 8572 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3020 -initialChannelId {6cbba82f-16cf-4924-82f4-e5bf5af4750b} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 58 tab
                                              5⤵
                                              • Checks processor information in registry
                                              PID:3108
                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10044 -prefsLen 37260 -prefMapHandle 7152 -prefMapSize 270279 -jsInitHandle 10144 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5724 -initialChannelId {6527d925-3c15-4e1c-ab57-709cbbbb518a} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 59 tab
                                              5⤵
                                              • Checks processor information in registry
                                              PID:6388
                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6756 -prefsLen 37260 -prefMapHandle 9352 -prefMapSize 270279 -jsInitHandle 3096 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5948 -initialChannelId {90456a66-66ef-4d0b-beaa-40a3d8189dd3} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 60 tab
                                              5⤵
                                              • Checks processor information in registry
                                              PID:2436
                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3064 -prefsLen 37260 -prefMapHandle 9740 -prefMapSize 270279 -jsInitHandle 7356 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2456 -initialChannelId {3610c1e4-ab6e-421d-8dea-6f02b2303090} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 61 tab
                                              5⤵
                                              • Checks processor information in registry
                                              PID:3492
                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9420 -prefsLen 37260 -prefMapHandle 3432 -prefMapSize 270279 -jsInitHandle 6240 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5212 -initialChannelId {520c3ee2-486e-411e-a203-5985db87c725} -parentPid 712 -crashReporter "\\.\pipe\gecko-crash-server-pipe.712" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 62 tab
                                              5⤵
                                              • Checks processor information in registry
                                              PID:6536
                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                      1⤵
                                      • Modifies registry class
                                      • Suspicious use of SetWindowsHookEx
                                      PID:6036
                                    • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                      "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                      1⤵
                                      • Modifies registry class
                                      • Suspicious use of SetWindowsHookEx
                                      PID:3612
                                    • C:\Windows\system32\svchost.exe
                                      C:\Windows\system32\svchost.exe -k GPSvcGroup
                                      1⤵
                                        PID:3968
                                      • C:\Windows\System32\SecurityHealthHost.exe
                                        \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                        1⤵
                                          PID:1056

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              activity-stream.contile.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\activity-stream.contile.json
                                              • Size 4KB
                                              • SHA256 50019376509bcd9ab2f308a6d2f893b506499cb7d705d2e1c578c993933a6cbe
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              activity-stream.discovery_stream.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\activity-stream.discovery_stream.json
                                              • Size 74KB
                                              • SHA256 9095363e33f961523632a47b1968ff913f2360771e7959d1621d0499f89e1c77
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              12157
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\doomed\12157
                                              • Size 18KB
                                              • SHA256 a1e6d89607248c2c76e62445c1a2e6fbd495435ee1bc4edaddaf9341bf2af905
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              30180
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\doomed\30180
                                              • Size 18KB
                                              • SHA256 9343ab3acc75c8d4ffb969dc9d01635b545066ed884585a280c4866c839169a3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              02D14B8AC3C1DB0CEDD6D01B85A6A55765FA5384
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\02D14B8AC3C1DB0CEDD6D01B85A6A55765FA5384
                                              • Size 47KB
                                              • SHA256 1ca3841aa0b26e6d97b6f7111a6a7c886fc1ab090eefadcd803899869f305778
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              03100235E7AEBB25C597DD91664A8F544DDFC529
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\03100235E7AEBB25C597DD91664A8F544DDFC529
                                              • Size 13KB
                                              • SHA256 74cdb4898d05a27d8ccc95bf25091ecac26c7ac6ac34302a5022425a3d5507ba
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              04159FD2823A404A958C6A611E1CE27780F8A1F6
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\04159FD2823A404A958C6A611E1CE27780F8A1F6
                                              • Size 22KB
                                              • SHA256 9f1bfaf3b4e565a34eb05a89d8c055b089d85a58f8cf083eda3e4be8ca948214
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              07C4B668AC297438F220A3BA2059E2755F17B66B
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\07C4B668AC297438F220A3BA2059E2755F17B66B
                                              • Size 32KB
                                              • SHA256 a2d154f39457732c4dd9e033949890353f778d4cb96323cb96f4fc3326b2f57c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              0A9391CCD87EEAC5367B16446B51CFD96B4DC310
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\0A9391CCD87EEAC5367B16446B51CFD96B4DC310
                                              • Size 14KB
                                              • SHA256 86968ce5fdc3cd5cd98c82c0aebe6b068ce3e0c312e5edd691ea5637f06be9f7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              0AB0099C88F3EB630525A275CE9718776B3A5DAC
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\0AB0099C88F3EB630525A275CE9718776B3A5DAC
                                              • Size 46KB
                                              • SHA256 8fb3e94ae4ecd03d2f2be965039c4eec1bbf38588e6592e90885690895cc6082
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              10564C1B869E629E8B44E5F2FDE239676720918E
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\10564C1B869E629E8B44E5F2FDE239676720918E
                                              • Size 46KB
                                              • SHA256 705524fb09822fb8788ccfa20f1cc4b0e491015b0f395a96c7d151517933d702
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              10762597A5B6026123B4AB3EEA40914F927D88CC
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\10762597A5B6026123B4AB3EEA40914F927D88CC
                                              • Size 46KB
                                              • SHA256 c5b413339c68f53a989c9c6a2a8d0d21b8164ed694ec47600badec9978b921b7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              1308BB10B19756FB5B31247E5F494D5ED44BD620
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\1308BB10B19756FB5B31247E5F494D5ED44BD620
                                              • Size 23KB
                                              • SHA256 36b8807014dd4d1ba9b99c3939375ef886ac548d9ca741ed248917afb19b110b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              19A54D302CDCD73300F6E6C8BAF0CCC35B14FE6B
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\19A54D302CDCD73300F6E6C8BAF0CCC35B14FE6B
                                              • Size 23KB
                                              • SHA256 fa5f6c9f450ef43fcb0883e299c967776954ceac9751602b8b92ca65072e7297
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              1CC3DD2EF4B385D16D93F6E61B8AD0D6BF9EF387
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\1CC3DD2EF4B385D16D93F6E61B8AD0D6BF9EF387
                                              • Size 18KB
                                              • SHA256 e075671c4a6fdb24e95559c0bd1f2a8bf1ef866c7db5cd6c298d1fd78451c849
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              1DE433635928E8A59B3536230F544AF4EC64E279
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\1DE433635928E8A59B3536230F544AF4EC64E279
                                              • Size 46KB
                                              • SHA256 e299c75bd14a13aa55f3e3c53c5d9c4587cf2a6fcc8faa800ac27ae8e09ed1e1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              1E2795E9A1426025A03FED2691CB39C4871CB32D
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\1E2795E9A1426025A03FED2691CB39C4871CB32D
                                              • Size 46KB
                                              • SHA256 6473572ade053702714665a3de06205d45fd151dfbd94bbe77f2899712c6782f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              2198E025A4A0ACF396ECF6E35C613711B9C1ECEC
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\2198E025A4A0ACF396ECF6E35C613711B9C1ECEC
                                              • Size 56KB
                                              • SHA256 c15f19e7d0e3ccca066ff8f9f97ef87073cab30c62bc351df7a64b97f891274f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              23120EF892A57CAC6801623712006034FBAD4F02
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\23120EF892A57CAC6801623712006034FBAD4F02
                                              • Size 70KB
                                              • SHA256 4bd34985e215995796ee5bcc177d57290ea2f690e532b17ea8bef6d941fef9e3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              262D959CB2AA6F2D7B401F465494F807269DE3AC
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\262D959CB2AA6F2D7B401F465494F807269DE3AC
                                              • Size 23KB
                                              • SHA256 34733e56359b812cbfb3424de5ebb225e7fdcc001f4d14543f01be01d5474aa8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              2844F55BBF904B13EB46E40494485BFBE6E37456
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\2844F55BBF904B13EB46E40494485BFBE6E37456
                                              • Size 46KB
                                              • SHA256 6fd97a72121089178cf4bf265a13442d6a300eb50b51a86c90359f9097318014
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              2A53FC88A93A378358FE3061E826D0C8F5B66EEF
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\2A53FC88A93A378358FE3061E826D0C8F5B66EEF
                                              • Size 18KB
                                              • SHA256 3ee79fd8840edb8ad1596515c6508a183b4b3596702ec2a785d9e82832268c79
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              2A86839DE9D0361C4D04F6CA6AC97D3855378822
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\2A86839DE9D0361C4D04F6CA6AC97D3855378822
                                              • Size 23KB
                                              • SHA256 9e08bb93acc1ab911f6b1ce34f2616c4fad019ae6a303ff0443d43dffffb6b5c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              2E0C955983A6E318D9A0107F8A59D4C416F676A8
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\2E0C955983A6E318D9A0107F8A59D4C416F676A8
                                              • Size 46KB
                                              • SHA256 e723bc5bb91d146518701b9ea5d3b824a05cb2f9b77cc472b7b90b1eaa84aedc
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              333AD1A38DE2D8CA54692E61C3BEA46BB32E9373
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\333AD1A38DE2D8CA54692E61C3BEA46BB32E9373
                                              • Size 20KB
                                              • SHA256 5b4a0fb866ebb2b5584f1898de2c8ff6a811b74a45c2d1518ba2d1fcb09302b1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              342A8E0911A6BF30368172FF53038786A9D53FD4
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\342A8E0911A6BF30368172FF53038786A9D53FD4
                                              • Size 54KB
                                              • SHA256 84a41ae2d6a00e8656fc746804aec7d15dfeddcf21956308e857a98d57f97031
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              3DA0FA0600D92B95BA07E6AC4D37BB5B2B816399
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\3DA0FA0600D92B95BA07E6AC4D37BB5B2B816399
                                              • Size 46KB
                                              • SHA256 fee340c3e46d435caaf82222db580ec71eb1b44d2b1277af51557a6a64bc6a6a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              47013F1EA6F96ADBE57D295A3641365979CAA3C0
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\47013F1EA6F96ADBE57D295A3641365979CAA3C0
                                              • Size 46KB
                                              • SHA256 f56df6d4e705ac4a4d15b26a1724e88f5f753eda22cc65fca87c00d59baf8899
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              47EADDA8850663A0AC7B395FA55084C36CA8A45D
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\47EADDA8850663A0AC7B395FA55084C36CA8A45D
                                              • Size 87KB
                                              • SHA256 02c2c4a28fe4882a0f7a10302b97ee74ba94bcad08e4ed34f5fd41c1959a9401
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              4F36654BAD9CDEA87DAD8498470520B0FC3287E3
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\4F36654BAD9CDEA87DAD8498470520B0FC3287E3
                                              • Size 6.6MB
                                              • SHA256 8ce1a17d0f2d51d838a5d3d1ec8f9381556fc55e93f291c7e6e5ac305016f842
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              5249BF23CB30792391A0C44DF4F35D61D5B9D974
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\5249BF23CB30792391A0C44DF4F35D61D5B9D974
                                              • Size 47KB
                                              • SHA256 8823923b4a94f33ea1cd937e369408b35ee4ef9c8af66f944fb3a075a9e94a19
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              564685F42ABE3D6C3CA5EEA3DB9DE41DAD5B2468
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\564685F42ABE3D6C3CA5EEA3DB9DE41DAD5B2468
                                              • Size 56KB
                                              • SHA256 c115d762b9ad7ba2a86b845cd5e3737e3f8250a5ca2ffe97c01abc77fbcb48dd
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              588EB4E89AF2AB89865DCC759FEE29F9982623DD
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\588EB4E89AF2AB89865DCC759FEE29F9982623DD
                                              • Size 6.7MB
                                              • SHA256 d25cc54cb0fb7d10d71be0f4d21ae457d836039257c40fe13c7dc3ec5ebfd11b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              58EC74778564E82A8492782A9F3F5701F7F5197B
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\58EC74778564E82A8492782A9F3F5701F7F5197B
                                              • Size 46KB
                                              • SHA256 0cd44c9bdeea87e54917a2ff61acc9c8032430b540f5d9f11be02432db2cd322
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              59E22D35BDD8D18A11F2342090B27550A5209B94
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\59E22D35BDD8D18A11F2342090B27550A5209B94
                                              • Size 46KB
                                              • SHA256 1a4b1d6f563cc96db47892df3d39be56229240b2e172a02d62d88db270468b59
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              5AE96EF0F55272ED144F774953CD961B3122F201
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\5AE96EF0F55272ED144F774953CD961B3122F201
                                              • Size 46KB
                                              • SHA256 cda2f0b737af18badd084011e3341259be4d5238ff7a09117cba61823434fc5c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              5E1F7C3E306E98BF93688CD661409CB9CA69546D
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\5E1F7C3E306E98BF93688CD661409CB9CA69546D
                                              • Size 46KB
                                              • SHA256 7b64566fbff8041a8730ea092e568353f37a42211411d2fbe5726ed2b28c130e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              5E69E692A4C4A9AE9D1F48DAC29E1B1981D2E5BB
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\5E69E692A4C4A9AE9D1F48DAC29E1B1981D2E5BB
                                              • Size 46KB
                                              • SHA256 e570329f26c281839dad7a7e64e2e2ca46b62ca013ea3f8a4b0e2b90a61bb71c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              79EF4B0BA6A93219C435A0EE6E4172C3CE05F134
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\79EF4B0BA6A93219C435A0EE6E4172C3CE05F134
                                              • Size 46KB
                                              • SHA256 827d149a6f9ad18a98e77b490e0c6138a91e6e9758366f52490c41973d1f6a21
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              7CBBECDCA00B19E95532A93F7F8FB032F4F15135
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\7CBBECDCA00B19E95532A93F7F8FB032F4F15135
                                              • Size 47KB
                                              • SHA256 7d90d544e4ffbbbc577cc91a4b3dc71ab7a144e6598cf5531f18355ae391e57c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              8036B9C69F07C96373ADF5ACF0FE725D83664060
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\8036B9C69F07C96373ADF5ACF0FE725D83664060
                                              • Size 46KB
                                              • SHA256 e8475c7b22506cf292b4670f1a003915fe970790fc14ebba981456aa8bead203
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              82A820DDE5209E3E8F3E04BB00521BABD1B8F4B2
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\82A820DDE5209E3E8F3E04BB00521BABD1B8F4B2
                                              • Size 246KB
                                              • SHA256 bdee54807a1bb31c345d4a73cc77abe0665e0ce139a7e88d7fa2a7b7bc128255
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              83B9E2B5440C3AC0C52A44009289CC934F95EE75
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\83B9E2B5440C3AC0C52A44009289CC934F95EE75
                                              • Size 22KB
                                              • SHA256 39051393587818492639da1fa239235fbcbad083aa135909bd0ae4c540e030f5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              86709FFBDE44571ECD5DA0A286A7E93D4E296E54
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\86709FFBDE44571ECD5DA0A286A7E93D4E296E54
                                              • Size 116KB
                                              • SHA256 2efd22c12fa5db525ef10365b446301d948e2de30eeda686bb1697e5beab09c8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              8993B51515C7B8196EAEFB342CFFE8BB8AD5F275
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\8993B51515C7B8196EAEFB342CFFE8BB8AD5F275
                                              • Size 8.2MB
                                              • SHA256 800734c01df6ae2f1c1d5eb7e54c8692c82392125fa47eb054bf60ab7efd34ca
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              8B25E8454E232927631BE425165E45781A7659CE
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\8B25E8454E232927631BE425165E45781A7659CE
                                              • Size 46KB
                                              • SHA256 970c8ab0f2b0f7e0ad1ad18273ad7f848b1b022f95c1fddc82261d20e2b980d5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              8DB513F1EC14F8D3ECBC1DBCD0D29163A52B5E32
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\8DB513F1EC14F8D3ECBC1DBCD0D29163A52B5E32
                                              • Size 46KB
                                              • SHA256 5cd8ed9ea2bbd25fef7a26ca2791224488568da63f5984721d7ffc781fe433fd
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              9106D04FACD0D171FFD9706366A68E837F25B941
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\9106D04FACD0D171FFD9706366A68E837F25B941
                                              • Size 54KB
                                              • SHA256 8cdb00d89386c934e299b4c0ef5beaf7d18ceb42af577845132bf9ead8cd5d83
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              9106D04FACD0D171FFD9706366A68E837F25B941
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\9106D04FACD0D171FFD9706366A68E837F25B941
                                              • Size 54KB
                                              • SHA256 8e5f9e32053c244bf1762d1f664789348b34c092caa2872344ea2acf9238cf29
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              94A9ED172634595D1A9509F01BE9ABA0C1ACBBB4
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\94A9ED172634595D1A9509F01BE9ABA0C1ACBBB4
                                              • Size 46KB
                                              • SHA256 cdf98e5529665c5d4e75449ddd3d025dd8c49f295a5e0a1e04b9b1c76461f286
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              95F50339BEC4F1BFD49FA61FA5F6DA0D6E762412
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\95F50339BEC4F1BFD49FA61FA5F6DA0D6E762412
                                              • Size 46KB
                                              • SHA256 5b7b5bb77953e7431e2f026e41ff432bdf25a63dcd39f14de3632404e45a13ec
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              992AE9E16F64D58348AC23C6F4CBB675515F3A4E
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\992AE9E16F64D58348AC23C6F4CBB675515F3A4E
                                              • Size 282KB
                                              • SHA256 6cd45fed034a4f6d068a53e9a49eed1e903dfac9e93a49c1464c6a7f8434f8c3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              993028AA9DB40A548F6DE9FC1B2EFFDC87A60CB1
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\993028AA9DB40A548F6DE9FC1B2EFFDC87A60CB1
                                              • Size 17KB
                                              • SHA256 0c6f6f5283e7b8c4ec2520ba939a7bb26c916e3028659f30ac8bd6fbffc74e2a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              A1DD3352842172BF85D19BDC5C24D26BA5B300CE
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\A1DD3352842172BF85D19BDC5C24D26BA5B300CE
                                              • Size 46KB
                                              • SHA256 018ef5f9e79b638f2a6f2935edbb57bd74ffc3d447f866bf9679c2650586e8c5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              A7FEE3A20DD9DCAE456B7104849B265CB36E8B17
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\A7FEE3A20DD9DCAE456B7104849B265CB36E8B17
                                              • Size 53KB
                                              • SHA256 b064238cfbcf70266c9102f802ec3e818a8e975e9be6f791e8e3e912c929b5b8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              A8F535537D1C5C8D5E1192C8C5EA0E59326C9E4C
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\A8F535537D1C5C8D5E1192C8C5EA0E59326C9E4C
                                              • Size 55KB
                                              • SHA256 fc0e0eea2aa6c5707a9129f2de432fdc7f8c2e32ac53cbe615c4a73b128fc04e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              AC18A840882BFF3859A27C849523396A44627A24
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\AC18A840882BFF3859A27C849523396A44627A24
                                              • Size 46KB
                                              • SHA256 de451cc4f66b87b18879f92f611a3cf804da39964c590bac208dc6024c1949c9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              AECE3095ABB72ED584DB24941AF240213D10DBFA
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\AECE3095ABB72ED584DB24941AF240213D10DBFA
                                              • Size 46KB
                                              • SHA256 4520f41c0872b4bd731a16957fbffeadaf2cce5445d63807934f69011a359ca9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              B0736805649FF235FB3E588E2FECED1B551A1DC0
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\B0736805649FF235FB3E588E2FECED1B551A1DC0
                                              • Size 9.3MB
                                              • SHA256 8eeb7c328323518c5e71c646c071fb50dfb86a64c32378ea9edacbeae3fb0627
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              B322DF87E7AC6CD4AD3A407538EE1E4799513294
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\B322DF87E7AC6CD4AD3A407538EE1E4799513294
                                              • Size 19KB
                                              • SHA256 f7da767dbaddaaa166413eb00a77e5b6028ca0fa5c85b54a0b55a9fa0f691c73
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              B7C49AFA0212E4ACE3BFDDA51E5C05DF2BF62A4C
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\B7C49AFA0212E4ACE3BFDDA51E5C05DF2BF62A4C
                                              • Size 82KB
                                              • SHA256 1be5510cf3b5689ec6058897848a008806d51465e08e9b07c20820f288281b1a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              B97D9BBEE906876DD5639D0CC2BB059DDE42CDFA
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\B97D9BBEE906876DD5639D0CC2BB059DDE42CDFA
                                              • Size 147KB
                                              • SHA256 7a42ac1125d381b52338d2b96f8cc0cf51207ed2994d05714775dee0ca713f5a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              B9D2E67C0A9F7D31270599B78F56EA819C1BF640
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\B9D2E67C0A9F7D31270599B78F56EA819C1BF640
                                              • Size 46KB
                                              • SHA256 20efce7c2d29d87dbd3dec2c6221318678cd296190a912fe351dbc09e8caef59
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              BC62D7806EEC485BE69F7B5FA25B30A5DB012B6C
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\BC62D7806EEC485BE69F7B5FA25B30A5DB012B6C
                                              • Size 22KB
                                              • SHA256 206c59217a9ec76acad76a4f5d2e659f59a48f4192030d7bc1db78d2f86e80d3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              C0F79CDA8E9F0852104A0F36BDB305FF16BB3221
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\C0F79CDA8E9F0852104A0F36BDB305FF16BB3221
                                              • Size 46KB
                                              • SHA256 2c88f70f83c722a8780f38b4586f2d141a66d06b232cd862573547d5e7b8f05d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              C5161384B82D0C6862BB8AC9F837F0244BB47547
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\C5161384B82D0C6862BB8AC9F837F0244BB47547
                                              • Size 8.0MB
                                              • SHA256 b55a8ac3a37dfaca2de4b0a97befe73a4fa072d24ad38765c27da9a634382b9b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              C7F4CF26FF71E77E149F4CA0DC50B8F453186260
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\C7F4CF26FF71E77E149F4CA0DC50B8F453186260
                                              • Size 215KB
                                              • SHA256 061d44df31e8df859d5f959eece9ef88eb025eb15edb0a81451deedbc06e919a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              C895C2E373D91A3995085F4E83E462695FA343A6
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\C895C2E373D91A3995085F4E83E462695FA343A6
                                              • Size 46KB
                                              • SHA256 fc6c7c6f39f01ed2c51f2ffe93f310e75b2a4df4b082554029fb9b07ca1b8edc
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              CD7B2F5C18597F2731C936FC56891A08F7C32F29
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\CD7B2F5C18597F2731C936FC56891A08F7C32F29
                                              • Size 280KB
                                              • SHA256 de6011084cebb59e0adbf45a6fd4a01eef7c01d471ce7e2bd9975e8d0b13cc9a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              CF9B3CBA1C84E06231CA2EAB4C7166F0595644AB
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\CF9B3CBA1C84E06231CA2EAB4C7166F0595644AB
                                              • Size 218KB
                                              • SHA256 5f6e61f84bca0977a6b1c30742b7de908eda76efeaf3fa864c2619cf10740da7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              D618514F349167F8F980C66ACA3C685C58340327
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\D618514F349167F8F980C66ACA3C685C58340327
                                              • Size 35KB
                                              • SHA256 8c70fd24043f5b68a216755ff50f44fb5d96775bf2cee253241aa6213b04f0c5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              D736938B5F96FB05E72D2277A35CD336880B7DA7
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\D736938B5F96FB05E72D2277A35CD336880B7DA7
                                              • Size 37KB
                                              • SHA256 a9bbbe119bfc4038a33c9d0e4261ba2ed7b8e82e9897aff578e773957688c31c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              D9F7C1314A7047A9F7D508E900445C71396FD97F
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\D9F7C1314A7047A9F7D508E900445C71396FD97F
                                              • Size 592KB
                                              • SHA256 b82c0fd715efea3c98d816eb0c890c2c269d37a0ab13817f68c724be69c08170
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              DE113332C9F928F8A0142AAF03A836DFF2BFDBA0
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\DE113332C9F928F8A0142AAF03A836DFF2BFDBA0
                                              • Size 82KB
                                              • SHA256 8bac56ae8187ce8c07a93184639794b1b1e7cccf1c188342ace1e89765c7077c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              F10CF5670A3219158C8718D9FB5F4763C268295D
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\F10CF5670A3219158C8718D9FB5F4763C268295D
                                              • Size 46KB
                                              • SHA256 4f68d7b6ddca2dc8b88d2190709f5f8e184fe0755d3cbf299a4365dceeb89552
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              F2DE19B2F0FBBF5CCC6E15C2AAF38E5279182F22
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\F2DE19B2F0FBBF5CCC6E15C2AAF38E5279182F22
                                              • Size 335KB
                                              • SHA256 ca6015c8832398b9a0e1943e10919a34e5014883bcf289ee4eaedd374f1cae02
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              F41AEF470FD641FB9E378F65FEA02AEA19B1F6A0
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\F41AEF470FD641FB9E378F65FEA02AEA19B1F6A0
                                              • Size 100KB
                                              • SHA256 5d1ca8b4ad6faf205388115c272bb5e3d896e5373b7ffdc19744eea53c0b4b30
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              F9190EAC58EFDF55EEC499F13B9DD9AAE7322715
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\F9190EAC58EFDF55EEC499F13B9DD9AAE7322715
                                              • Size 68KB
                                              • SHA256 d7c230629a296af9ed71433557b4a1de0fb2a29efbdfd1bce0ddbb2d883695bc
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              FA0D70049D2A72AAD7630C18F6D948FEFBD9BEDF
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\FA0D70049D2A72AAD7630C18F6D948FEFBD9BEDF
                                              • Size 210KB
                                              • SHA256 96dae3e226ccb78026375ec48e1b989aa43877c4a703c584b68bea8ed7690e9e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              FDFA8F1A8C052C4F69D7BC22D297CDFADA28F29C
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\cache2\entries\FDFA8F1A8C052C4F69D7BC22D297CDFADA28F29C
                                              • Size 23KB
                                              • SHA256 9536d10daea13cfa466b779422a705c978f24e064188adce3543fc1c70f41f34
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_arts_and_entertainment.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
                                              • Size 67KB
                                              • SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_autos_and_vehicles.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
                                              • Size 44KB
                                              • SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_beauty_and_fitness.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
                                              • Size 33KB
                                              • SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_blogging_resources_and_services.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
                                              • Size 33KB
                                              • SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_books_and_literature.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
                                              • Size 67KB
                                              • SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_business_and_industrial.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
                                              • Size 45KB
                                              • SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_computers_and_electronics.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
                                              • Size 45KB
                                              • SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_finance.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_finance.json
                                              • Size 33KB
                                              • SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_food_and_drink.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
                                              • Size 67KB
                                              • SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_games.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_games.json
                                              • Size 44KB
                                              • SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_health.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_health.json
                                              • Size 33KB
                                              • SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_hobbies_and_leisure.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
                                              • Size 67KB
                                              • SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_home_and_garden.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
                                              • Size 33KB
                                              • SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_internet_and_telecom.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
                                              • Size 67KB
                                              • SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_jobs_and_education.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
                                              • Size 33KB
                                              • SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_law_and_government.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
                                              • Size 68KB
                                              • SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_online_communities.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_online_communities.json
                                              • Size 67KB
                                              • SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_people_and_society.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
                                              • Size 45KB
                                              • SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_pets_and_animals.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
                                              • Size 44KB
                                              • SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_real_estate.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_real_estate.json
                                              • Size 67KB
                                              • SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_reference.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_reference.json
                                              • Size 56KB
                                              • SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_science.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_science.json
                                              • Size 56KB
                                              • SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_shopping.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_shopping.json
                                              • Size 67KB
                                              • SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_sports.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_sports.json
                                              • Size 56KB
                                              • SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              nb_model_build_attachment_travel.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\nb_model_build_attachment_travel.json
                                              • Size 67KB
                                              • SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              recipe_attachment.json
                                              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\c1sxuejy.default-release\personality-provider\recipe_attachment.json
                                              • Size 1KB
                                              • SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              prep_Activatable Class_Hermes_perf.cache
                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                              • Size 599B
                                              • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              remote-settings-startup-bundle-
                                              • Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
                                              • Size 534KB
                                              • SHA256 f2a43c4dedd5ad5fd2f5fc725399856a54cd49e5400831f05581ec1038569677
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              tmpaddon
                                              • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                              • Size 11KB
                                              • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              tmpaddon
                                              • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                              • Size 502KB
                                              • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              6824f4a902c78fbd.customDestinations-ms
                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                              • Size 7KB
                                              • SHA256 02a7c46dba94614a0d3173716ae7e26ce791c1f18048a9ecf207bcd8e85ea585
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              6824f4a902c78fbd.customDestinations-ms
                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                              • Size 7KB
                                              • SHA256 f3b28697d831e3db809e2349b5589bf10c7837c0ef0e2c0f7a72833b75ae1603
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              AlternateServices.bin
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\AlternateServices.bin
                                              • Size 42KB
                                              • SHA256 f527cc7a4630439a712119f0c1ee730503bced511ac5771d906dbfd5a6a7f65f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              AlternateServices.bin
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\AlternateServices.bin
                                              • Size 42KB
                                              • SHA256 232ffd729833f253c625e1935bfa6a8eb620c6ee3b00414927f152976cfd618e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              AlternateServices.bin
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\AlternateServices.bin
                                              • Size 10KB
                                              • SHA256 2cf3d680a63aa1e821986becd1bc560b9d704ad76b21e0a0c829bf76ef44fa42
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              addonStartup.json.lz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\addonStartup.json.lz4
                                              • Size 4KB
                                              • SHA256 2b6df3dec3481e891d7da5be0cbe1c53c8d3adf3afed362950a825311c68c2ce
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              bookmarks-2026-06-26_10_J39FV_i0Kh7UzpFIa2aIn52_9oc_eHFRrWx6Zp4KgeM=.jsonlz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\bookmarkbackups\bookmarks-2026-06-26_10_J39FV_i0Kh7UzpFIa2aIn52_9oc_eHFRrWx6Zp4KgeM=.jsonlz4
                                              • Size 857B
                                              • SHA256 fc0d8d2747538533a7f7df1066ee7d04175969c7fe5c5fd54ae68ae8908a6e26
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              data.safe.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\db\data.safe.tmp
                                              • Size 155KB
                                              • SHA256 8678ccfcea5e439495fdab4564a8834dd8037c07155d286e4cd13822b1808388
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              data.safe.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\db\data.safe.tmp
                                              • Size 144KB
                                              • SHA256 d85726179a75714a634019ed705d39f15d090e9e151d73517a0713d8de7fbb42
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              data.safe.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\db\data.safe.tmp
                                              • Size 144KB
                                              • SHA256 3490c450e3d1a91e9e67dcecb2bdc3b68f802f287e1839c5d177e8cdfc2d0a56
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              data.safe.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\db\data.safe.tmp
                                              • Size 6KB
                                              • SHA256 db697dbd835ee705e2ffe100912863d217adc957e4c8b45e7909d21b99ae403a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              data.safe.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\db\data.safe.tmp
                                              • Size 7KB
                                              • SHA256 689e824338a4a4261513aac21cbf6b21fbee9d135f6cf216b24a83a9cf950c91
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              data.safe.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\db\data.safe.tmp
                                              • Size 144KB
                                              • SHA256 ae7fbb558a78b4179f5931735b79ca5133a6fc9b7bd0b4fddd59ce88d1e46e43
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              data.safe.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\db\data.safe.tmp
                                              • Size 144KB
                                              • SHA256 e2f5f29bf6a9f622a3fa70f6777fb9782ec49cd66923e0232d04d77a0b7cdae9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              events
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\events\events
                                              • Size 6KB
                                              • SHA256 4115acbb4335473fb4811aa39a887cab215d40b7dc622e741a909fa3990d2af6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              events
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\events\events
                                              • Size 1KB
                                              • SHA256 56f01fc3f814c7a51920d287aff813354cfde874f2ce5a87caab2bcabe332258
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              15b1f98c-34c2-424b-a6e9-97fa302acbe6
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\pending_pings\15b1f98c-34c2-424b-a6e9-97fa302acbe6
                                              • Size 235B
                                              • SHA256 c8ab7620fa24d118d8a867e18ebf3a274ff83eb52009f81a504c329ffa20bbb3
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              3e6d8e41-975e-4058-9dca-696cd9e1f49f
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\pending_pings\3e6d8e41-975e-4058-9dca-696cd9e1f49f
                                              • Size 886B
                                              • SHA256 9e13bced85c116d53ef9c9c927691c4d3db6e8fe0893c29cf6500a7452be07be
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              664bda25-49bc-464b-a122-d522ffb4c04e
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\pending_pings\664bda25-49bc-464b-a122-d522ffb4c04e
                                              • Size 235B
                                              • SHA256 2214c58ea5bd408d09b59bb1c6e03b6cd0603a0930a7ef0bff16a04e1cce31f2
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              9235b606-f153-4929-8ecb-b20ab70b6ba0
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\pending_pings\9235b606-f153-4929-8ecb-b20ab70b6ba0
                                              • Size 883B
                                              • SHA256 66b9717aa55a4731e1bd38a0757f7fcab3d5a0ff0fd3ee5d259cb9387045cbab
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              c1e802a4-b79a-4e3b-a474-40dcdde43c96
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\pending_pings\c1e802a4-b79a-4e3b-a474-40dcdde43c96
                                              • Size 16KB
                                              • SHA256 6faf6a8770a6bfa27a9f05313c9dce7bd59c3342fcfd7403f550efbab99eaa60
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              c369d116-b4f5-4844-8b8a-5d0075bedb03
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\datareporting\glean\pending_pings\c369d116-b4f5-4844-8b8a-5d0075bedb03
                                              • Size 2KB
                                              • SHA256 cb7195c50172042773da2ce56a8b75f7fbb9bc54a856c4da55d5a18f3784b372
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              extension-preferences.json
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\extension-preferences.json
                                              • Size 942B
                                              • SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              extensions.json
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\extensions.json
                                              • Size 16KB
                                              • SHA256 91953064e662a257bb57c918650e5fbb18a2d911c93209fa41f1e8f72dfc3402
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              gmpopenh264.dll
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                                              • Size 1.1MB
                                              • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              gmpopenh264.info
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                                              • Size 116B
                                              • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              manifest.json
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                                              • Size 1002B
                                              • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              widevinecdm.dll
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                                              • Size 21.6MB
                                              • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              prefs-1.js
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\prefs-1.js
                                              • Size 12KB
                                              • SHA256 e5854e4210fb071f6da02bdb68d21e056825330956491513f4e9cf9c75aeec78
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              prefs-1.js
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\prefs-1.js
                                              • Size 12KB
                                              • SHA256 9819e759b1793102fc9550f0218583f9e7ebc0971de5dc84a920a8608a439774
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              prefs-1.js
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\prefs-1.js
                                              • Size 8KB
                                              • SHA256 f1d807de0966ba7bf6491215bfc8ddd48a9f948eada5be40d37c38fa1f8dfbf5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              prefs-1.js
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\prefs-1.js
                                              • Size 6KB
                                              • SHA256 3087a0ef8e6c477314e2abc4cf935e8e14a22aa0944ede47fb8a9de8c1172e62
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              prefs.js
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\prefs.js
                                              • Size 6KB
                                              • SHA256 6952e65afe27b38c7b79e72e5f70ccbb8dfd1b20d2bc53f7133b0c625f3fb52a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              prefs.js
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\prefs.js
                                              • Size 7KB
                                              • SHA256 e061f680348819606aee160dbc4d593c90f264b3517aa29db0409d013b1a56e2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              recovery.baklz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\sessionstore-backups\recovery.baklz4
                                              • Size 1KB
                                              • SHA256 99e4031efe618253690ddbfc215e2026c2a672dd5bde0b6f62da33b84cfc8325
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              recovery.baklz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\sessionstore-backups\recovery.baklz4
                                              • Size 1KB
                                              • SHA256 64babab9f1bb14134e602066aeaf4cd103efce5397afd37793df4ca6a8affcb9
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              recovery.baklz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\sessionstore-backups\recovery.baklz4
                                              • Size 1KB
                                              • SHA256 b278b1acbcca471869f5cf653488a50eed0003caee05cb411abf4e503b7eccfd
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              recovery.baklz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\sessionstore-backups\recovery.baklz4
                                              • Size 1KB
                                              • SHA256 c5d21add041a5ab004f66be1abe829060feba6090b87fa0436df33868433bfef
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              recovery.baklz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\sessionstore-backups\recovery.baklz4
                                              • Size 1KB
                                              • SHA256 c7237ea529c2e4b2c03d5a1cd944505d3691e93dc3cccd514aeb2c093add7970
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              recovery.baklz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\sessionstore-backups\recovery.baklz4
                                              • Size 1KB
                                              • SHA256 ae5b15d3d3f2b29fcde32ddfe462f8b3eb27694f75ca856b15a8c9894eb3b695
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              recovery.baklz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\sessionstore-backups\recovery.baklz4
                                              • Size 1KB
                                              • SHA256 f4cb3df064db1fe2c8428e976d754068474e85d3e960a7eafbaecd9a7d702b79
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              recovery.baklz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\sessionstore-backups\recovery.baklz4
                                              • Size 1KB
                                              • SHA256 283206c0cbc8ee50f4e1d19ab13511ffd9a48673578482796ed333808774ea1a
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              recovery.baklz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\sessionstore-backups\recovery.baklz4
                                              • Size 1KB
                                              • SHA256 e323d22d7d3e8d0727095276cd2649a57b46e4b39cd0d9b1dd97d76dbb329ed3
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              recovery.baklz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\sessionstore-backups\recovery.baklz4
                                              • Size 1KB
                                              • SHA256 a16f7b1b5c53117ba1e9e0da373399e6a83c565c7d67d3ce74f807f38b6beb3c
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              recovery.baklz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\sessionstore-backups\recovery.baklz4
                                              • Size 1KB
                                              • SHA256 6b9972dc8a90f1bf3a751e3eb731ef625e5657e863fc030d074fb0ebc241a94c
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              recovery.baklz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\sessionstore-backups\recovery.baklz4
                                              • Size 1KB
                                              • SHA256 f2a6e7840a50ab4b28223aca4671b2e214a15abef6dfb8739413a473f305faa1
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              recovery.baklz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\sessionstore-backups\recovery.baklz4
                                              • Size 1KB
                                              • SHA256 f07525c339e9754e9dcaf0dd82ea45b499fd62da66d0c31a5c97718d5b513980
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              recovery.jsonlz4
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\sessionstore-backups\recovery.jsonlz4
                                              • Size 1KB
                                              • SHA256 3857286500977a67c81b4cfb56338275ab229cae1fb2f3362c5feb26ca3fda05
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              {c51adb76-538a-42c9-8b7f-7536326f7dec}.final
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\storage\default\https+++www.whatismyip.com\cache\morgue\236\{c51adb76-538a-42c9-8b7f-7536326f7dec}.final
                                              • Size 79B
                                              • SHA256 f110b28a486ab66369b145302adc5ee6eb1995afa0fe19bface6093921f0ff1d
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              usage
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\storage\default\https+++www.whatismyip.com\ls\usage
                                              • Size 12B
                                              • SHA256 68f96b6bf4051f9331e48e761279255cd88eb757f77665e0aeedcedcae1ab971
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              usage
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\storage\default\https+++www.whatismyip.com\ls\usage
                                              • Size 12B
                                              • SHA256 f0855fa2fda51324f3c923d33e6dc591473d91aafee86a1d3a7048a6bbe279e8
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              3870112724rsegmnoittet-es.sqlite
                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\c1sxuejy.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                              • Size 7.1MB
                                              • SHA256 a13a55445c4c2dc76cc2c997edbb1c728fbe7bd2b2ca475970bbf109881fd6e2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              My Agent.exe
                                              • Path C:\Users\Admin\AppData\Roaming\WindowsUpdate\My Agent.exe
                                              • Size 8.3MB
                                              • SHA256 3e05800f04a3a72fc5867cf0b2707092476c69cc2e67a74aa115805f6a014fc0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              id
                                              • Path C:\Users\Admin\AppData\Roaming\WindowsUpdate\id
                                              • Size 32B
                                              • SHA256 08e19e19b270c0642ca7a2649c694cef23cedb6ef4a7c21def0254344ee133d5
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              memory/1720-342-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-400-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-397-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-406-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-394-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-151-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-391-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-153-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-388-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-155-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-385-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-157-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-382-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-379-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-159-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-376-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-338-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-373-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-403-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-370-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-345-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-367-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-348-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-364-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-361-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-351-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-358-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/1720-354-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/3612-180-0x000001BD04E80000-0x000001BD04F80000-memory.dmp
                                              Download

                                              memory/3612-181-0x000001BD04E80000-0x000001BD04F80000-memory.dmp
                                              Download

                                              memory/3612-202-0x000001BD08910000-0x000001BD08930000-memory.dmp
                                              Download

                                              memory/3612-226-0x000001BD18E90000-0x000001BD18EB0000-memory.dmp
                                              Download

                                              memory/3612-189-0x000001BD08B80000-0x000001BD08C80000-memory.dmp
                                              Download

                                              memory/3612-188-0x000001BD086B0000-0x000001BD086D0000-memory.dmp
                                              Download

                                              memory/5048-344-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-158-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-369-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-357-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-372-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-341-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-56-0x0000000372200000-0x000000037220D000-memory.dmp
                                              Download

                                              memory/5048-375-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-366-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-402-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-399-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-350-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-360-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-353-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-378-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-347-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-384-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-156-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-387-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-154-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-390-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-393-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-150-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-396-0x00007FF6D62E0000-0x00007FF6D8B8A000-memory.dmp
                                              Download

                                              memory/5048-26-0x0000000207610000-0x000000020761D000-memory.dmp
                                              Download

                                              memory/5048-36-0x000000029A970000-0x000000029A97D000-memory.dmp
                                              Download

                                              memory/5048-66-0x00000003A51D0000-0x00000003A51DD000-memory.dmp
                                              Download

                                              memory/5768-25-0x00007FF720070000-0x00007FF72291A000-memory.dmp
                                              Download

                                              memory/5768-0-0x00000002A1770000-0x00000002A177E000-memory.dmp
                                              Download

                                              memory/6052-340-0x000000000A490000-0x000000000A6EF000-memory.dmp
                                              Download