Analysis

  • user interaction
    yes
  • max time kernel
    600s
  • max time network
    548s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    04/08/2026, 01:58

General

  • Target
    http://realvelocity.xyz
  • Sample260804-cdzqfsbb77
Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 3 IoCs
  • Checks processor information in registry 2 TTPs 44 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 8 IoCs
  • Suspicious use of FindShellTrayWindow 13 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "http://realvelocity.xyz"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3956
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url http://realvelocity.xyz
      2⤵
      • Checks processor information in registry
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3280
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1988 -prefsLen 27097 -prefMapHandle 1992 -prefMapSize 270279 -ipcHandle 1944 -initialChannelId {7ed6ec60-f11b-4c5f-a808-4133ab7a37ab} -parentPid 3280 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3280" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        3⤵
          PID:1960
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2436 -prefsLen 27133 -prefMapHandle 2440 -prefMapSize 270279 -ipcHandle 2304 -initialChannelId {34d1e12b-d13a-4aa2-a175-afc1d1948388} -parentPid 3280 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3280" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
          3⤵
          • Checks processor information in registry
          PID:3268
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3744 -prefsLen 25164 -prefMapHandle 3748 -prefMapSize 270279 -jsInitHandle 3752 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3760 -initialChannelId {eab4e157-1d45-4786-96f2-8aa20e48d1e1} -parentPid 3280 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3280" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
          3⤵
          • Checks processor information in registry
          PID:5300
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3908 -prefsLen 27274 -prefMapHandle 3912 -prefMapSize 270279 -ipcHandle 3980 -initialChannelId {3ab3d055-72d8-4dc6-a94e-5cd5bb23571b} -parentPid 3280 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3280" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
          3⤵
            PID:3732
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4608 -prefsLen 34773 -prefMapHandle 4612 -prefMapSize 270279 -jsInitHandle 4616 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4624 -initialChannelId {da758906-f710-4aa9-8abb-093a822ab237} -parentPid 3280 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3280" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
            3⤵
            • Checks processor information in registry
            PID:2624
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4504 -prefsLen 35010 -prefMapHandle 4380 -prefMapSize 270279 -ipcHandle 2876 -initialChannelId {d3e5082c-65c9-4635-8087-98519bb9dad2} -parentPid 3280 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3280" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
            3⤵
            • Checks processor information in registry
            PID:5628
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5536 -prefsLen 32952 -prefMapHandle 5540 -prefMapSize 270279 -jsInitHandle 5544 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4408 -initialChannelId {0fc019bf-320f-4a5f-8bb6-1868f8e43674} -parentPid 3280 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3280" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
            3⤵
            • Checks processor information in registry
            PID:4936
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5560 -prefsLen 32952 -prefMapHandle 5564 -prefMapSize 270279 -jsInitHandle 5568 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2932 -initialChannelId {d4b8c1b4-83f3-4616-a8db-4e87b6100f3f} -parentPid 3280 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3280" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
            3⤵
            • Checks processor information in registry
            PID:4364
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5840 -prefsLen 32952 -prefMapHandle 5844 -prefMapSize 270279 -jsInitHandle 5848 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5856 -initialChannelId {651feff5-60ec-442e-83a9-0394ab306362} -parentPid 3280 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3280" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
            3⤵
            • Checks processor information in registry
            PID:1416
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3096 -prefsLen 32952 -prefMapHandle 3044 -prefMapSize 270279 -jsInitHandle 2936 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3756 -initialChannelId {0517f526-d06d-4aa7-bbff-e5797a5e21b6} -parentPid 3280 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3280" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
            3⤵
            • Checks processor information in registry
            PID:5280
      • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
        "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
        1⤵
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:1516
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe"
        1⤵
        • Suspicious use of WriteProcessMemory
        PID:2696
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe"
          2⤵
          • Drops desktop.ini file(s)
          • Checks processor information in registry
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:5124
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2028 -prefsLen 31069 -prefMapHandle 2052 -prefMapSize 270923 -ipcHandle 2136 -initialChannelId {df65771e-71ac-4c4d-b9ad-ad1d00f8def2} -parentPid 5124 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5124" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
            3⤵
              PID:5648
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2400 -prefsLen 31069 -prefMapHandle 2404 -prefMapSize 270923 -ipcHandle 2412 -initialChannelId {aba4b58e-27c4-47dd-b1a0-29f3b78849e2} -parentPid 5124 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5124" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
              3⤵
                PID:6116
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3308 -prefsLen 31526 -prefMapHandle 3312 -prefMapSize 270923 -jsInitHandle 3316 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3324 -initialChannelId {7869be5b-1895-45b2-b1af-c603daad0c01} -parentPid 5124 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5124" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
                3⤵
                • Checks processor information in registry
                PID:4816
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3504 -prefsLen 31526 -prefMapHandle 3508 -prefMapSize 270923 -ipcHandle 3356 -initialChannelId {ebf969c0-4682-4fe6-8f70-30fdb8361750} -parentPid 5124 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5124" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
                3⤵
                  PID:236
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4088 -prefsLen 31667 -prefMapHandle 4092 -prefMapSize 270923 -jsInitHandle 4076 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4104 -initialChannelId {ceac4366-02dd-4794-ae68-f82bbe61bd33} -parentPid 5124 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5124" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                  3⤵
                  • Checks processor information in registry
                  PID:5392
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 3124 -prefsLen 39326 -prefMapHandle 3256 -prefMapSize 270923 -ipcHandle 3224 -initialChannelId {66af28d8-0f4b-4252-bb54-0e3388f43dc2} -parentPid 5124 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5124" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                  3⤵
                  • Checks processor information in registry
                  PID:5820
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2828 -prefsLen 36261 -prefMapHandle 2904 -prefMapSize 270923 -jsInitHandle 2932 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5656 -initialChannelId {d3c32538-048d-4f4d-8293-70963181b1ef} -parentPid 5124 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5124" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                  3⤵
                  • Checks processor information in registry
                  PID:556
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5868 -prefsLen 36261 -prefMapHandle 5872 -prefMapSize 270923 -jsInitHandle 5876 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5880 -initialChannelId {02409964-a953-4a2b-97bd-853e112e991a} -parentPid 5124 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5124" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                  3⤵
                  • Checks processor information in registry
                  PID:1048
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6048 -prefsLen 36261 -prefMapHandle 6044 -prefMapSize 270923 -jsInitHandle 5828 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5980 -initialChannelId {e167d1b0-aec0-40b1-86c9-6a7e3b257715} -parentPid 5124 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5124" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                  3⤵
                  • Checks processor information in registry
                  PID:6008
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5808 -prefsLen 36301 -prefMapHandle 5800 -prefMapSize 270923 -jsInitHandle 5796 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5788 -initialChannelId {9a6e214c-7f5f-4fc8-a425-1ed1782a3470} -parentPid 5124 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5124" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
                  3⤵
                  • Checks processor information in registry
                  PID:748

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  activity-stream.contile.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\activity-stream.contile.json
                  • Size 4KB
                  • SHA256 12e44ffbc705c9338f2d6e5ef5168c4f9e9b1bb187b12f85e43e83dbfd46ff1d
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  activity-stream.discovery_stream.json.tmp

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\activity-stream.discovery_stream.json.tmp
                  • Size 76KB
                  • SHA256 462d9cd497d65a3efff30a6f5da7f86ab25c6a8cf56a1e53ec4999ec66e9cdb8
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  activity-stream.weather_feed.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\activity-stream.weather_feed.json
                  • Size 14B
                  • SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
                  • MD5 SHA1 SHA512

                  00F2CF0EBA93B3142E2826949795E91CB422655D

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\00F2CF0EBA93B3142E2826949795E91CB422655D
                  • Size 10KB
                  • SHA256 e1fe6fad18494cbb265cc2ba83fed06d15c5f8b71eb37ef72f99fdb529d5cd81
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  0FAAF426B1560D2FB7554FC1F8B6E525130583D4

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\0FAAF426B1560D2FB7554FC1F8B6E525130583D4
                  • Size 13KB
                  • SHA256 2ac9a24938fddcc54d47a3838a4917245c5f3518d95ef3953f31419116279208
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  111AE63D71402EFB02DAB8AC254CA509866314D5

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\111AE63D71402EFB02DAB8AC254CA509866314D5
                  • Size 19KB
                  • SHA256 46ee1f2dd51f1d73b2e46e0f55aba9278bf0ac38504c45420491320f3f24e09f
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  15A1105BD50C8019A270EB43562CA2D47A46C584

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\15A1105BD50C8019A270EB43562CA2D47A46C584
                  • Size 12KB
                  • SHA256 10bc1d063c065f4a6031cd6ef601731744cb5cc0761a367ea74e8c51777c249c
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  1B376774B9B19793AB33D4930C17162F8FC1FF4B

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\1B376774B9B19793AB33D4930C17162F8FC1FF4B
                  • Size 10KB
                  • SHA256 94eb3d8431de6310722951c41a0288ebf494f068b841a0b7ae508886efb419ed
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  1C8C54682B3709CAC523039982C1103B7620A376

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\1C8C54682B3709CAC523039982C1103B7620A376
                  • Size 13KB
                  • SHA256 8eda857348468a0493db815a12ee600071a8c5680bba90b9b2215658d57e7b3c
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  1E3B5A60EC7EEF66E5839B55BBFAA66405FACF63

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\1E3B5A60EC7EEF66E5839B55BBFAA66405FACF63
                  • Size 12KB
                  • SHA256 4b7dfe882d8239a5e3d12a6cb326d937a44aaf01c104cb2ce4acc4437fff3872
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  22A255102EB822AC234E7BCE82F9A221AEC71617

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\22A255102EB822AC234E7BCE82F9A221AEC71617
                  • Size 12KB
                  • SHA256 11fa37984b6f798674b4c0f09a71528585267da755cf928f8ad0aef580d39da8
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  24C9DF0972DD334A2DC66C223393C392A8C4BEF3

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\24C9DF0972DD334A2DC66C223393C392A8C4BEF3
                  • Size 12KB
                  • SHA256 f9b15c599b3371d1268477afd45358a1922976a8eb1a21fc8e9e804ea1679190
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  2EDBAFD66D895C60066E4C5FA12546BE3EB5CA22

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\2EDBAFD66D895C60066E4C5FA12546BE3EB5CA22
                  • Size 56KB
                  • SHA256 f6f6e5258f062b621474ee9a179d9c402fe90f55453ed4dc3de3bb5107c3792b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  2FA9B78D63767CF6F0F825ED68D35E0FCA3C7E29

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\2FA9B78D63767CF6F0F825ED68D35E0FCA3C7E29
                  • Size 26KB
                  • SHA256 d787185f7c99febee62858968926dfef63d61a5cc9fc5e75cc126b287c7237ac
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3281DC7424266B8F5972F3C5F94F14664B586C7F

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\3281DC7424266B8F5972F3C5F94F14664B586C7F
                  • Size 23KB
                  • SHA256 8a7f9845fdefba3742416c27d6470c893cab1d2df6296d9d4f6d5f0203263b2e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  39107958C59220C40790BF3DA2CF80A6F84B0019

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\39107958C59220C40790BF3DA2CF80A6F84B0019
                  • Size 231KB
                  • SHA256 973f38bbb027f455a0064d3d7d1a607f1e5285f7c8c3739bb4a36b8dccf01264
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3948F231342688EDE4BBF775617CBFC16F3F170B

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\3948F231342688EDE4BBF775617CBFC16F3F170B
                  • Size 12KB
                  • SHA256 18c5d9f673b4b11c79c0dda0f4be642b067bcbd9ff073a14d6f1ab35151eea22
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
                  • Size 16KB
                  • SHA256 925971eab200f31eb22b9d031af682100823ab1359e0986242d571689f474dd4
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
                  • Size 16KB
                  • SHA256 f2a58d619167003222e2bd1fdc01a686884782fe642964eaf53f9d05c7e3a59f
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  6D89348819C8881868053197CA0754F36784BF5F

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F
                  • Size 16KB
                  • SHA256 6a344fffaf93631b583c9b492b81538842e8dbc127f02b2cde14e56eeed13d51
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  BB95D0607349D05725D5FE01D4FB300E319072AD

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\BB95D0607349D05725D5FE01D4FB300E319072AD
                  • Size 11KB
                  • SHA256 013d052f3977e8dc6328cec15c86db5927d49f11dc311a9f8abc0ff9ddb14a88
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  D0F48A0632B6C451791F4257697E861961F06A6F

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\D0F48A0632B6C451791F4257697E861961F06A6F
                  • Size 52B
                  • SHA256 cb05c9804d9ce8c7d4d4d6c525601d924e2ddadff603b721dfe64a51c99ca841
                  • MD5 SHA1 SHA512 TLSH

                  E20C53A67D4E062A1CD0633071EC0ED50F86A2D8

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\E20C53A67D4E062A1CD0633071EC0ED50F86A2D8
                  • Size 16KB
                  • SHA256 1d25d3e8db275b01fc18dc3c1f935fbdd080ac0129221070ece815632d21e5c1
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  E473D920361435DF4BBBF194E406FE372015579A

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cache2\entries\E473D920361435DF4BBBF194E406FE372015579A
                  • Size 11KB
                  • SHA256 c42062e54dfdc1071330da7fc5e128cd158359826aae661e46a3c62ab525f1eb
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_arts_and_entertainment.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
                  • Size 67KB
                  • SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_autos_and_vehicles.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
                  • Size 44KB
                  • SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_beauty_and_fitness.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
                  • Size 33KB
                  • SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_blogging_resources_and_services.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
                  • Size 33KB
                  • SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_books_and_literature.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
                  • Size 67KB
                  • SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_business_and_industrial.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
                  • Size 45KB
                  • SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_computers_and_electronics.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
                  • Size 45KB
                  • SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_finance.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_finance.json
                  • Size 33KB
                  • SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_food_and_drink.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
                  • Size 67KB
                  • SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_games.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_games.json
                  • Size 44KB
                  • SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_health.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_health.json
                  • Size 33KB
                  • SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_hobbies_and_leisure.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
                  • Size 67KB
                  • SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_home_and_garden.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
                  • Size 33KB
                  • SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_internet_and_telecom.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
                  • Size 67KB
                  • SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_jobs_and_education.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
                  • Size 33KB
                  • SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_law_and_government.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
                  • Size 68KB
                  • SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_online_communities.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_online_communities.json
                  • Size 67KB
                  • SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_people_and_society.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
                  • Size 45KB
                  • SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_pets_and_animals.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
                  • Size 44KB
                  • SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_real_estate.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_real_estate.json
                  • Size 67KB
                  • SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_reference.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_reference.json
                  • Size 56KB
                  • SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_science.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_science.json
                  • Size 56KB
                  • SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_shopping.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_shopping.json
                  • Size 67KB
                  • SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_sports.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_sports.json
                  • Size 56KB
                  • SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  nb_model_build_attachment_travel.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\nb_model_build_attachment_travel.json
                  • Size 67KB
                  • SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  recipe_attachment.json

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\personality-provider\recipe_attachment.json
                  • Size 1KB
                  • SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
                  • MD5 SHA1 SHA512 TLSH

                  scriptCache-child.bin

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\startupCache\scriptCache-child.bin
                  • Size 471KB
                  • SHA256 665d2626e60d4ad25b229726f7606efe23bf45956df164877f1e453db0758a90
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  scriptCache.bin

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\startupCache\scriptCache.bin
                  • Size 10.3MB
                  • SHA256 f27dab786afafc6f6cd00e21b05e5152947bf66c989457e08f871ff0172ba3c1
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  startupCache.8.little

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\startupCache\startupCache.8.little
                  • Size 8.4MB
                  • SHA256 4d4d9a15ddfb67f41c17b1eabe36ebc76aaad3da4488714ec515257ccb85ff8d
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  urlCache.bin

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\startupCache\urlCache.bin
                  • Size 3KB
                  • SHA256 3aa1f64135026076126dd9791da7e297caa3bcba66c83f08191cbcbc6ab851f0
                  • MD5 SHA1 SHA512 TLSH

                  webext.sc.lz4

                  • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\startupCache\webext.sc.lz4
                  • Size 106KB
                  • SHA256 597ad708e3246f8511ff3ad775fbaec1be0cba8bdf5791c0de458238fa636fa9
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  SearchHoverUnifiedTileModelCache.dat

                  • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
                  • Size 22KB
                  • SHA256 c8bc5d3dd15b59560509fe926204c4f3ce1ac7eb357b9cf0318ecc265c2f5f49
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  c894b6c0-88c1-48f7-b68a-270f3007a9cf.zip

                  • Path C:\Users\Admin\AppData\Local\Temp\c894b6c0-88c1-48f7-b68a-270f3007a9cf.zip
                  • Size 3.7MB
                  • SHA256 5294294bc8f81626cad76fa46c1fdec8df4f6d7a05576adfecbaa571149f3daa
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  remote-settings-startup-bundle-

                  • Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
                  • Size 549KB
                  • SHA256 b609fc4417f0caf46180210cd6d5926a79bea001e60cee165629180c896fadff
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  tmpaddon

                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                  • Size 11KB
                  • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  tmpaddon

                  • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                  • Size 502KB
                  • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  D61B3XEJYK4DK6K62BWI.temp

                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\D61B3XEJYK4DK6K62BWI.temp
                  • Size 14KB
                  • SHA256 9de8e97438040716b9a2d7fb545385c9668646ca6b052df266cbde2817d6b452
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  AlternateServices.bin

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\AlternateServices.bin
                  • Size 8KB
                  • SHA256 f67a7e4c2b06d8b7609c86d467e25d21abc8456a4fdfc87ffb43e8ca0ed68971
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  AlternateServices.bin

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\AlternateServices.bin
                  • Size 8KB
                  • SHA256 cc9bb55f03bf84248e31f14cc120255dcac3f54be476c7e82170876f6918f2b2
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  AlternateServices.bin

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\AlternateServices.bin
                  • Size 5KB
                  • SHA256 0a6d3e0cc3d4cec5df536a96443846aa03da70e05ccd5ab1ed563c3abd944718
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  SiteSecurityServiceState.bin

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\SiteSecurityServiceState.bin
                  • Size 2KB
                  • SHA256 a3bb714c3222fc5c07b0e16e26c86e1b73baed400d0740f20669c7f7b8560a2a
                  • MD5 SHA1 SHA512 TLSH

                  addonStartup.json.lz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\addonStartup.json.lz4
                  • Size 4KB
                  • SHA256 b38aa5ac09f147ee1393b95c47c425b1008d2ea40ae3bdf52b78af8a89401380
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  addonStartup.json.lz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\addonStartup.json.lz4
                  • Size 4KB
                  • SHA256 09cd767853813b979ae668a6ab97f0dceb05fd375494c006f0fc1e438193a531
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  bookmarks-2026-08-04_10_YImQPl3V1nWHWBvoCoefRRfRO0nOwB8ZwB_2y7CplJI=.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\bookmarkbackups\bookmarks-2026-08-04_10_YImQPl3V1nWHWBvoCoefRRfRO0nOwB8ZwB_2y7CplJI=.jsonlz4
                  • Size 860B
                  • SHA256 a98a98ee12a1f1e2ae6c0e0b5c4658d7bad90321eacaf66a639fd186044a0152
                  • MD5 SHA1 SHA512 TLSH

                  bounce-tracking-protection.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\bounce-tracking-protection.sqlite
                  • Size 96KB
                  • SHA256 16d8d648d4701c86be4efad45ec5c88f4c0718c913c181ded7a50dd17512bd08
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  cert9.db

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\cert9.db
                  • Size 224KB
                  • SHA256 446a5d1647923993195aead7abdbf4866972509f02d49e783c5314129c826c7e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  compatibility.ini

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\compatibility.ini
                  • Size 198B
                  • SHA256 252b7fff962848c61092e82a3d87adca163849767713a93ab533bb397f1f53bb
                  • MD5 SHA1 SHA512 TLSH

                  content-prefs.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\content-prefs.sqlite
                  • Size 256KB
                  • SHA256 fff6c2239e0d2ccc2dfe16bece3f51fe2831ce8baaa337827bbde444207a727b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  store.json.mozlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\crashes\store.json.mozlz4
                  • Size 66B
                  • SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
                  • MD5 SHA1 SHA512 TLSH

                  data.safe.bin

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\db\data.safe.bin
                  • Size 48KB
                  • SHA256 7b7ffcc0c32710e58272d12df8ef72e977981b08227b11f32892fdacd68725b9
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 51KB
                  • SHA256 371547ed81ffea916fde5fb2f422b24e7fe831a5e120ee26c3b2bbb072d61d66
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 47KB
                  • SHA256 06b4b4ff001fc80ddf6b45f592ee1fab5b8a68b0ee9976286a90895e0f6b04d3
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 51KB
                  • SHA256 e7412257151e8e3c9b7e6ad848ec9f6ed21fa5cbf45c7c0f36d85d33b45ef0b0
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 51KB
                  • SHA256 86df34c5207512f106f7ba5975b7bb8a6d846fd2029ddbf629cdeec24949b89d
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 51KB
                  • SHA256 a349371f97f714a5171fb8ad5f6d41eb1f0ef6883101cc6e2d33b2726d9271ee
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 6KB
                  • SHA256 b9a4df07be86e3dab41c849b3402556d3ca302f2c123b68b8a321299333057db
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 7KB
                  • SHA256 6b35ca8c3e9a54cfe654d5bced74c88ba1ee390a42b27c0bcd75ee9b2acd5933
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\db\data.safe.tmp
                  • Size 7KB
                  • SHA256 124b25df4fd904536d944a6ec21d18e2c740aedf5a19318f0240d21c2d3fe190
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  events

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\events\events
                  • Size 1KB
                  • SHA256 2cb68e7c137e9dbfb604fd17d3edc773ebe8cbb8d2be3a642ccc8493e21680e7
                  • MD5 SHA1 SHA512 TLSH

                  events

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\events\events
                  • Size 1KB
                  • SHA256 aa178f41885a27301126ae45a76ef36030260bad21dbb51cdbed94fcbc2663b8
                  • MD5 SHA1 SHA512 TLSH

                  events

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\events\events
                  • Size 3KB
                  • SHA256 7323c6234eefe143baebf4c5ce07032f3939038bb4e8b1733a55d00bd58e4625
                  • MD5 SHA1 SHA512 TLSH

                  pageload

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\events\pageload
                  • Size 550B
                  • SHA256 21a985fe19cb6d7e7589963043d7d55ebdf9847f00953e03ede997ee3c8e3624
                  • MD5 SHA1 SHA512 TLSH

                  12dd366f-5eac-4cb1-adec-6a9c0ade6fbf

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\12dd366f-5eac-4cb1-adec-6a9c0ade6fbf
                  • Size 972B
                  • SHA256 8072616b147685306c4a48c8d59621bdb280102cbf58404c48df03afb15bda8e
                  • MD5 SHA1 SHA512 TLSH

                  31b36ce0-9856-4aaf-a9af-35bfa7dfc8fa

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\31b36ce0-9856-4aaf-a9af-35bfa7dfc8fa
                  • Size 871B
                  • SHA256 e94b2169e750cd2c3950c074dc292b25abfbae53ac962bfc88f1c570e6bfaf3d
                  • MD5 SHA1 SHA512 TLSH

                  396467d1-766d-4640-86e2-7b090e92eda8

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\396467d1-766d-4640-86e2-7b090e92eda8
                  • Size 235B
                  • SHA256 8cab1e85f0a05c4f31d1716ccb7d82f917f5744c5054379fe895341c80eaf765
                  • MD5 SHA1 SHA512 TLSH

                  4e80b83e-7369-41eb-b582-42fec0583050

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\4e80b83e-7369-41eb-b582-42fec0583050
                  • Size 235B
                  • SHA256 449f83336a540caad8d701490d73e62b8c32d628e4b010610d46becb8b435a8b
                  • MD5 SHA1 SHA512 TLSH

                  91142783-8807-417d-adaa-5bedbbb4d005

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\91142783-8807-417d-adaa-5bedbbb4d005
                  • Size 280B
                  • SHA256 31fde2d0da3c637f38f8753824916c8514b07021d187529dbe9389e07c5d805f
                  • MD5 SHA1 SHA512 TLSH

                  948bd374-94c3-4a4d-9bcd-e0bb8f4e8bf8

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\948bd374-94c3-4a4d-9bcd-e0bb8f4e8bf8
                  • Size 4KB
                  • SHA256 99b47362f8d83b37a1db6fed488be7aaf6478b9ffc40beb57c5d1feae1cc58b1
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  a603d86d-d328-4089-b851-59d98737ee4e

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\a603d86d-d328-4089-b851-59d98737ee4e
                  • Size 3KB
                  • SHA256 8e2212a3a962067141cdb660b15e9b73a2975c83f055bf717a9a777646cf9964
                  • MD5 SHA1 SHA512 TLSH

                  b9814bf3-c4fa-44fd-988c-d577e7f80df3

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\b9814bf3-c4fa-44fd-988c-d577e7f80df3
                  • Size 970B
                  • SHA256 327aa7529aad79455f83250fca501fbef05113aec80598eaa7c3c3000c1a350e
                  • MD5 SHA1 SHA512 TLSH

                  b9d617de-58d0-4e4a-b999-c770e8b95143

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\b9d617de-58d0-4e4a-b999-c770e8b95143
                  • Size 2KB
                  • SHA256 507381870919dd6b07b34d5c1f092881e6ac77d1e58ab963a5ce6c2239fd34ec
                  • MD5 SHA1 SHA512 TLSH

                  e742cc36-56d5-4634-8dfd-afc2d3f6f126

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\datareporting\glean\pending_pings\e742cc36-56d5-4634-8dfd-afc2d3f6f126
                  • Size 886B
                  • SHA256 82ce8c5bf7ea45aa1eed405596d8ab57663e045034845095f0a35c62bdc4b5c2
                  • MD5 SHA1 SHA512 TLSH

                  domain_to_categories.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\domain_to_categories.sqlite
                  • Size 96KB
                  • SHA256 c7baab1cd8662625bc822a3c3c7b57973b927cd5c26192d6cda60ed9ecc0ed07
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  extension-preferences.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\extension-preferences.json
                  • Size 942B
                  • SHA256 00dc2290dbbdce30a85e06ded26d7ee786412fa45c1348a801bfe2c13b9c63d0
                  • MD5 SHA1 SHA512 TLSH

                  extensions.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\extensions.json
                  • Size 16KB
                  • SHA256 c31c4da6f89dbd54e2ba56780f5598012100f5493dc508ad90d58cec3185b596
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  favicons.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\favicons.sqlite
                  • Size 5.0MB
                  • SHA256 538c9710b6c429dd8bbfa5ae760773d2edffc119ea8cfbda6d02da563215dcea
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  gmpopenh264.dll

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                  • Size 1.1MB
                  • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  gmpopenh264.info

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                  • Size 116B
                  • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                  • MD5 SHA1 SHA512 TLSH

                  manifest.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                  • Size 1002B
                  • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                  • MD5 SHA1 SHA512 TLSH

                  widevinecdm.dll

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                  • Size 21.6MB
                  • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  permissions.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\permissions.sqlite
                  • Size 96KB
                  • SHA256 87450622d0301bb8c365c3294a72581a2badda83b7ba91d0abae3c232a02c67a
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  places.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\places.sqlite
                  • Size 5.0MB
                  • SHA256 54ade4702e705cf460036a627000e4117b10ab884260384f1ed1b5c4dddbeb19
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs-1.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs-1.js
                  • Size 8KB
                  • SHA256 6d2379d7bead40acd4c8bf1bbd0e2ae1aabb903663274a0504b9dc771397540e
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs-1.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs-1.js
                  • Size 12KB
                  • SHA256 1421dcbe026603f3b2163a9fbdea2c1801d46d90affd5360a36051c3b9c38385
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs-1.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs-1.js
                  • Size 11KB
                  • SHA256 72b21bd46db8c827364c9245b7411a26a1e3debc87ef3636fa42ce07da369369
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs-1.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs-1.js
                  • Size 6KB
                  • SHA256 8068afb64cc706ea7275a388bcb00fb0af94c30ee9d40ec421f5b7e58ba875b9
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs.js
                  • Size 6KB
                  • SHA256 d0be11cb21efaf7390f5a0f9d709790f34b75036198a6245856b388992cd2d41
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs.js
                  • Size 11KB
                  • SHA256 78c2971dfb220a982ab60e01124f0025687893fdd9d72172ffaefa6dada749f2
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  prefs.js

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\prefs.js
                  • Size 11KB
                  • SHA256 641b646956c0c037980c10f514b1f88e4a67434a861037a14c9311de6337f8d0
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  protections.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\protections.sqlite
                  • Size 64KB
                  • SHA256 f47973dd13805200a469d534a0ec50e224f0c12ae77d93a0e5bcc267af19c145
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  search.json.mozlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\search.json.mozlz4
                  • Size 350B
                  • SHA256 2a317a8ff64d03538667913a28d8769f7483b207d7949590e83bce951ff9fe4a
                  • MD5 SHA1 SHA512 TLSH

                  sessionCheckpoints.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\sessionCheckpoints.json
                  • Size 288B
                  • SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
                  • MD5 SHA1 SHA512 TLSH

                  sessionCheckpoints.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\sessionCheckpoints.json
                  • Size 90B
                  • SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
                  • MD5 SHA1 SHA512 TLSH

                  sessionCheckpoints.json.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\sessionCheckpoints.json.tmp
                  • Size 53B
                  • SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
                  • MD5 SHA1 SHA512 TLSH

                  recovery.baklz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\sessionstore-backups\recovery.baklz4
                  • Size 1KB
                  • SHA256 f30b824bb8300d0c52672994643eeb2ed2642d933129ce591101f96a1b8a8f4a
                  • MD5 SHA1 SHA512 TLSH

                  recovery.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\sessionstore-backups\recovery.jsonlz4
                  • Size 370KB
                  • SHA256 9d0b1f446f858b77a50e378f319aeb1db579d12c90cd5bcd493678daec10e890
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  upgrade.jsonlz4-20250130195129

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\sessionstore-backups\upgrade.jsonlz4-20250130195129
                  • Size 901B
                  • SHA256 d1d6b306749bc94e8ae80bfebee018fb250d62aafeec8aeabf3b2f822288cf4a
                  • MD5 SHA1 SHA512 TLSH

                  sessionstore.jsonlz4

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\sessionstore.jsonlz4
                  • Size 122KB
                  • SHA256 a8e1fb9e78471bfcf751ccbeb6d5b8b78e7f641f0122106aaa6ca3527739de1b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  data.safe.bin

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\settings\data.safe.bin
                  • Size 152B
                  • SHA256 25242e7a5c4943c81738c478cccb7531aea528898f5147c0430b3262c1788ad1
                  • MD5 SHA1 SHA512 TLSH

                  storage.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\storage.sqlite
                  • Size 4KB
                  • SHA256 b8ccad800a36eefcb37282227d1b8c201de4f8b90d6914900a5f401148821e96
                  • MD5 SHA1 SHA512 TLSH

                  1657114595AmcateirvtiSty.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
                  • Size 48KB
                  • SHA256 2f3bb8e9ae7847aa804f227460fc26b76662063c74013daac227751b0553292b
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 4.2MB
                  • SHA256 3044570cb02aacbcb11a2cc711781f88e97b6b8d8908644ac17cf5f3ac72e092
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  3870112724rsegmnoittet-es.sqlite

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                  • Size 6.5MB
                  • SHA256 55f7e6453e1980f67ba4b73e072a56bd845e9c66923d7be939586729b8c68ab8
                  • MD5 SHA1 SHA512 SSDEEP TLSH

                  xulstore.json

                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1ml9u8ox.default-release\xulstore.json
                  • Size 138B
                  • SHA256 a02e97cea0637af9194a127b910c439eeecfff4c1b1ee384bee600b8afc5f088
                  • MD5 SHA1 SHA512 TLSH