Analysis

  • user interaction
    yes
  • max time kernel
    1799s
  • max time network
    1802s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    04/08/2026, 18:46

General

  • Target
    https://thisvid.com/videos/alexa-really-swallowed-xiomi-mi-band-2/
  • Sample260804-xe5nbavycx

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: [email protected]
  • Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Drops desktop.ini file(s) 3 IoCs
  • Detected potential entity reuse from brand GOOGLE. 1 IoCs
  • Checks processor information in registry 2 TTPs 64 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 12 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://thisvid.com/videos/alexa-really-swallowed-xiomi-mi-band-2/"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3460
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://thisvid.com/videos/alexa-really-swallowed-xiomi-mi-band-2/
      2⤵
      • Drops desktop.ini file(s)
      • Detected potential entity reuse from brand GOOGLE.
      • Checks processor information in registry
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3904
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2012 -prefsLen 27101 -prefMapHandle 2016 -prefMapSize 270279 -ipcHandle 2060 -initialChannelId {0f678ad0-19b1-4593-8968-eb51501cd87c} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        3⤵
          PID:5020
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2500 -prefsLen 27137 -prefMapHandle 2504 -prefMapSize 270279 -ipcHandle 2512 -initialChannelId {c4ac9f45-232c-4725-91fc-2747ea0855d5} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
          3⤵
            PID:4012
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3720 -prefsLen 25213 -prefMapHandle 3724 -prefMapSize 270279 -jsInitHandle 3728 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3736 -initialChannelId {de3485cc-b908-47b8-8c0f-3c27edb451bd} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
            3⤵
            • Checks processor information in registry
            PID:4644
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2820 -prefsLen 27326 -prefMapHandle 1612 -prefMapSize 270279 -ipcHandle 3904 -initialChannelId {ac85c476-50ff-4f22-8831-f02f620f7073} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
            3⤵
              PID:4212
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4348 -prefsLen 34825 -prefMapHandle 3056 -prefMapSize 270279 -jsInitHandle 4356 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4364 -initialChannelId {6d991ef4-1d2d-4b46-a241-5f6c62ba718a} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
              3⤵
              • Checks processor information in registry
              PID:1464
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 1632 -prefsLen 35013 -prefMapHandle 1636 -prefMapSize 270279 -ipcHandle 4680 -initialChannelId {d86babdf-9bfe-4641-ab84-2821713d4ae9} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
              3⤵
              • Checks processor information in registry
              PID:5160
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5328 -prefsLen 32988 -prefMapHandle 5332 -prefMapSize 270279 -jsInitHandle 5336 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5316 -initialChannelId {d634e3e6-ca12-477e-8876-465f4f0ff398} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
              3⤵
              • Checks processor information in registry
              PID:2428
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5564 -prefsLen 32988 -prefMapHandle 5568 -prefMapSize 270279 -jsInitHandle 5572 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5604 -initialChannelId {e57904f1-0060-46b0-8e5d-324c048a8ebf} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
              3⤵
              • Checks processor information in registry
              PID:2924
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5588 -prefsLen 32988 -prefMapHandle 5592 -prefMapSize 270279 -jsInitHandle 5596 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5612 -initialChannelId {febb7685-9849-4467-b39e-2a71d72a8bd6} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
              3⤵
              • Checks processor information in registry
              PID:4328
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5268 -prefsLen 33114 -prefMapHandle 1248 -prefMapSize 270279 -jsInitHandle 1244 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5152 -initialChannelId {2cce8fc5-7a82-428e-86bd-446813101635} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
              3⤵
              • Checks processor information in registry
              PID:552
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 1620 -prefsLen 35344 -prefMapHandle 6648 -prefMapSize 270279 -ipcHandle 6500 -initialChannelId {93ce4d9d-505c-459b-9154-46df060cbc7f} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 utility
              3⤵
              • Checks processor information in registry
              PID:5588
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 6268 -prefsLen 35344 -prefMapHandle 6440 -prefMapSize 270279 -ipcHandle 6612 -initialChannelId {82d56cc5-3da1-4934-98f6-f9488bee800f} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 utility
              3⤵
              • Checks processor information in registry
              PID:3520
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6188 -prefsLen 33319 -prefMapHandle 6824 -prefMapSize 270279 -jsInitHandle 6844 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6384 -initialChannelId {bf892aee-ca6d-4311-ae9c-09a3433723a6} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
              3⤵
              • Checks processor information in registry
              PID:6008
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5672 -prefsLen 33319 -prefMapHandle 5656 -prefMapSize 270279 -jsInitHandle 5660 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6824 -initialChannelId {8b0978c3-5a7b-46c5-be35-9f220ebfc21c} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
              3⤵
              • Checks processor information in registry
              PID:5364
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7160 -prefsLen 34409 -prefMapHandle 7112 -prefMapSize 270279 -jsInitHandle 7120 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4748 -initialChannelId {8e504dcf-9eff-489e-8c55-ae04d92cd1c2} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
              3⤵
              • Checks processor information in registry
              PID:3272
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3756 -prefsLen 41323 -prefMapHandle 3836 -prefMapSize 270279 -jsInitHandle 3840 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6076 -initialChannelId {ba0f758b-48f3-4339-961c-4513f6c81095} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
              3⤵
              • Checks processor information in registry
              PID:5496
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5780 -prefsLen 38159 -prefMapHandle 6344 -prefMapSize 270279 -jsInitHandle 5956 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 14752 -initialChannelId {f0f737b9-0165-48ab-b31c-1e5f6b591b54} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
              3⤵
              • Checks processor information in registry
              PID:2236
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5856 -prefsLen 38159 -prefMapHandle 3388 -prefMapSize 270279 -jsInitHandle 12900 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5816 -initialChannelId {e81c95eb-9480-4903-9b5a-c911580dbeb0} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
              3⤵
              • Checks processor information in registry
              PID:5312
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 21800 -prefsLen 38159 -prefMapHandle 21736 -prefMapSize 270279 -jsInitHandle 21868 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 21584 -initialChannelId {6baabab7-5588-4269-80eb-ff7de16452c1} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
              3⤵
              • Checks processor information in registry
              PID:5912
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 21372 -prefsLen 38159 -prefMapHandle 21356 -prefMapSize 270279 -jsInitHandle 7952 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 21692 -initialChannelId {d8f5b4a9-473b-40b1-bbe4-9d1b16ee6a2a} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
              3⤵
              • Checks processor information in registry
              PID:1992
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2832 -prefsLen 38159 -prefMapHandle 6736 -prefMapSize 270279 -jsInitHandle 7204 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7376 -initialChannelId {6225724b-5f2e-413e-8f0e-b529244bbe39} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
              3⤵
              • Checks processor information in registry
              PID:4892
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8068 -prefsLen 38159 -prefMapHandle 8120 -prefMapSize 270279 -jsInitHandle 7892 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7568 -initialChannelId {de4f0106-7957-45c7-90f7-69de7ed4fc48} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
              3⤵
              • Checks processor information in registry
              PID:4728
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 21444 -prefsLen 38159 -prefMapHandle 7756 -prefMapSize 270279 -jsInitHandle 7492 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7788 -initialChannelId {305d7fb3-da37-45fd-a3e7-c175686504ab} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 23 tab
              3⤵
              • Checks processor information in registry
              PID:5988
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 21656 -prefsLen 38159 -prefMapHandle 21788 -prefMapSize 270279 -jsInitHandle 5988 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7408 -initialChannelId {881d5cd4-0e71-40f6-9929-163c2ea37936} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 24 tab
              3⤵
              • Checks processor information in registry
              PID:2992
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7340 -prefsLen 38159 -prefMapHandle 8080 -prefMapSize 270279 -jsInitHandle 19080 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 20176 -initialChannelId {75399060-c461-4b46-b88a-5e5196c8af89} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 25 tab
              3⤵
              • Checks processor information in registry
              PID:4492
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 22200 -prefsLen 38159 -prefMapHandle 5224 -prefMapSize 270279 -jsInitHandle 7176 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 20128 -initialChannelId {4c42cc46-dd5b-4bec-883e-cbbe66203430} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 26 tab
              3⤵
              • Checks processor information in registry
              PID:4500
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5224 -prefsLen 38159 -prefMapHandle 7176 -prefMapSize 270279 -jsInitHandle 19080 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 21700 -initialChannelId {64a50d82-071e-4077-990b-6dc97bf89c22} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 27 tab
              3⤵
              • Checks processor information in registry
              PID:2768
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 19008 -prefsLen 38159 -prefMapHandle 7176 -prefMapSize 270279 -jsInitHandle 19080 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7268 -initialChannelId {20c2d94c-dfca-4803-a814-98d7fa4857d3} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 28 tab
              3⤵
              • Checks processor information in registry
              PID:3912
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 21816 -prefsLen 38159 -prefMapHandle 21752 -prefMapSize 270279 -jsInitHandle 7936 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 22088 -initialChannelId {97c833b7-594e-41c3-acc6-3cf52211160a} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 29 tab
              3⤵
              • Checks processor information in registry
              PID:908
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7392 -prefsLen 38159 -prefMapHandle 6452 -prefMapSize 270279 -jsInitHandle 6548 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5408 -initialChannelId {9d47e030-c22b-4848-a3b3-5650e77323fe} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 30 tab
              3⤵
              • Checks processor information in registry
              PID:2496
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7008 -prefsLen 38159 -prefMapHandle 7524 -prefMapSize 270279 -jsInitHandle 20084 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5960 -initialChannelId {0cabc42d-23f0-4275-b1b6-83498b57466f} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 31 tab
              3⤵
              • Checks processor information in registry
              PID:5364
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7524 -prefsLen 38159 -prefMapHandle 21800 -prefMapSize 270279 -jsInitHandle 21904 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 21848 -initialChannelId {a2c56846-8760-4f24-8f6f-b6b93be153f0} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 32 tab
              3⤵
              • Checks processor information in registry
              PID:5480
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5692 -prefsLen 38159 -prefMapHandle 4316 -prefMapSize 270279 -jsInitHandle 8012 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7688 -initialChannelId {5d3bdcf9-2ef2-4dd5-8078-c2089dd8638c} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 33 tab
              3⤵
              • Checks processor information in registry
              PID:5548
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 19700 -prefsLen 38159 -prefMapHandle 20604 -prefMapSize 270279 -jsInitHandle 19676 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 19652 -initialChannelId {9ec3c571-39da-4ffa-928a-9eb88f73b591} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 34 tab
              3⤵
              • Checks processor information in registry
              PID:4732
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 19052 -prefsLen 38159 -prefMapHandle 5516 -prefMapSize 270279 -jsInitHandle 22236 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 19968 -initialChannelId {504188d5-16cb-4c81-9300-6d4dee26d1af} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 35 tab
              3⤵
              • Checks processor information in registry
              PID:796
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 21900 -prefsLen 38159 -prefMapHandle 20436 -prefMapSize 270279 -jsInitHandle 22176 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 21868 -initialChannelId {9444a480-5491-4fbf-839b-a4cbe3f47d3d} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 36 tab
              3⤵
              • Checks processor information in registry
              PID:2696
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7796 -prefsLen 38159 -prefMapHandle 8132 -prefMapSize 270279 -jsInitHandle 5692 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7940 -initialChannelId {9f53f573-9728-4584-9ecb-c268133a2b88} -parentPid 3904 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3904" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 37 tab
              3⤵
              • Checks processor information in registry
              PID:4996

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              activity-stream.contile.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\activity-stream.contile.json
              • Size 5KB
              • SHA256 c6d47f1e8fe1e288f5200c75151c1eef536e805a5e80f352f91424b6137ff31a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              activity-stream.discovery_stream.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\activity-stream.discovery_stream.json
              • Size 75KB
              • SHA256 0bf9aa32231d59ac04adc91195bc83cf72e18b61760a45998c4eabfef14f849e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              24359

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\doomed\24359
              • Size 20KB
              • SHA256 48c5020a6437e4eb511be8c5c4367c952a6f7f4d91cb17ccc5dac4ef6fc2a200
              • MD5 SHA1 SHA512 SSDEEP TLSH

              2818

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\doomed\2818
              • Size 57KB
              • SHA256 fe383f8b89bf17fe36dbbd94b379e8c886199227a4275325c2bc4ed112cdf4a1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              13D24036D1F36586F30C1BD12398BECB8248FADC

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\13D24036D1F36586F30C1BD12398BECB8248FADC
              • Size 14KB
              • SHA256 df7d14151de7b32223e6497bbf6ff5ff99dacf6bbf3341d55a9a2dd25c74b867
              • MD5 SHA1 SHA512 SSDEEP TLSH

              1AD16251413C489F7D276EF9DE16A8EEB880C0FE

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\1AD16251413C489F7D276EF9DE16A8EEB880C0FE
              • Size 51KB
              • SHA256 386e161e1c8617c86b85fc60444a8e0df9b571e73ac5cd04a6ec5b656749d939
              • MD5 SHA1 SHA512 SSDEEP TLSH

              2458191D38A2D11EE8159715AE1F2819726D0593

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\2458191D38A2D11EE8159715AE1F2819726D0593
              • Size 179KB
              • SHA256 11dbbf850bbf65a31e197157ef8776945308f64f74f97aab51f31c23496a7c3e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              270CC27B7E5C2FA8F5339BA25F2ED30A3EA87B4C

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\270CC27B7E5C2FA8F5339BA25F2ED30A3EA87B4C
              • Size 263KB
              • SHA256 ace008b03018b95421900ab80dea6301543152339a8e002de8691c2de5039df1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              32240BCE61DCE7C244C0C1DE9781B3D6A8245444

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\32240BCE61DCE7C244C0C1DE9781B3D6A8245444
              • Size 63KB
              • SHA256 cfd7e340ca76827150804d8b4c6c086c4c0ee4cc355ae630fc6cdc4a8a311daf
              • MD5 SHA1 SHA512 SSDEEP TLSH

              32390839B78B0DE097B8F9BD4CD8E80AED55DCE6

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\32390839B78B0DE097B8F9BD4CD8E80AED55DCE6
              • Size 16KB
              • SHA256 8594239076d7c0b9ba757ccfe9084fb90acf8ccf920b72f98b7f813353aa44f1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3498F86521DC03345E74CC99833460AFB3B18266

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\3498F86521DC03345E74CC99833460AFB3B18266
              • Size 256KB
              • SHA256 1750bc1d8cf74d6ad72ec5e4bc4ec865babedd40ca63511814cc40ffb47dc146
              • MD5 SHA1 SHA512 SSDEEP TLSH

              368025A8F80572081712E3877B8F676031AE1511

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\368025A8F80572081712E3877B8F676031AE1511
              • Size 15KB
              • SHA256 5a0f299394d407ac6dfe665f83029f31a62e2361d43001580e971fbfcb45b468
              • MD5 SHA1 SHA512 SSDEEP TLSH

              432E1FF6F0763E22FAA81FB03388FB06880D64FC

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\432E1FF6F0763E22FAA81FB03388FB06880D64FC
              • Size 324KB
              • SHA256 40d443c61563b16a4f47c725e88394bcebc47a77f9dc8e145b31acf415f40483
              • MD5 SHA1 SHA512 SSDEEP TLSH

              44CF14CF809D98999C55644A812156E6B94F0A17

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\44CF14CF809D98999C55644A812156E6B94F0A17
              • Size 14KB
              • SHA256 a9e838b69f342fbc6710b1b0f0165bc897444538930cde66c99c8fe6d73b24ed
              • MD5 SHA1 SHA512 SSDEEP TLSH

              4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
              • Size 16KB
              • SHA256 a099744b004aafab8b242caf91d211e2559843c1e2662b8a72abd55244ea0de3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              5C5353EF0134ED68FD0661138F6A1B49BC5B74D5

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\5C5353EF0134ED68FD0661138F6A1B49BC5B74D5
              • Size 13KB
              • SHA256 2402c442c0a0a36688969a169db8cdac735b804a6197fb6809ccf06db6657e1c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              719CB04E364F5382BF1660AAEDBAE9DB0E6E593F

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\719CB04E364F5382BF1660AAEDBAE9DB0E6E593F
              • Size 205KB
              • SHA256 02d1ed6ccc2c1b74dec6a23fed68dca7d58c7aab76095c8b353ca60845809184
              • MD5 SHA1 SHA512 SSDEEP TLSH

              73856E6CFFB606701BFF826980D399F8C930CCB6

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\73856E6CFFB606701BFF826980D399F8C930CCB6
              • Size 87KB
              • SHA256 e9a9b7733d977eea30a9978c034567553f92fc10c1a3feef4e7d69f86728e786
              • MD5 SHA1 SHA512 SSDEEP TLSH

              940044399ED547B4AE77FB6FD39198616D3C6F78

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\940044399ED547B4AE77FB6FD39198616D3C6F78
              • Size 319KB
              • SHA256 9aeadb74b59976e6ec663f92c623b0b9a47ef2cdbe8c6f11eb8bd5d84ef0efa6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              A3BB25B9AFF070C339F05C5F4CEA28601262E04A

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\A3BB25B9AFF070C339F05C5F4CEA28601262E04A
              • Size 97KB
              • SHA256 7be2e0cb83a3e203a06a78e18d11257ff79ce5b23fd13cb44a2dc84c1630879d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ADB6F81171CF63CE0991F3BE0A4E08C624895CF0

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\ADB6F81171CF63CE0991F3BE0A4E08C624895CF0
              • Size 14KB
              • SHA256 3ec028a2d0275ef02aac1720c9a998168689d1f825bc7a8e8c5df2140e0e2cf1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              B8CA8CE1BFCC0DEB3D731ABA86AE2BABC6C2A4AB

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\B8CA8CE1BFCC0DEB3D731ABA86AE2BABC6C2A4AB
              • Size 49KB
              • SHA256 9af0595f30a445aa2da211b58f40ff40fb4f81962d88181b172f89bf9ec98dc2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              E07222A1D17D463346CE6EEFB52502C5D76D422D

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\E07222A1D17D463346CE6EEFB52502C5D76D422D
              • Size 107KB
              • SHA256 0224843de9f961069c30efdcef499eee3184af1cd8c1f6c2056b47b1a9f0acdb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              E2C1E8C7D97F9E69F76E6CC8C841B41A7706A814

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\E2C1E8C7D97F9E69F76E6CC8C841B41A7706A814
              • Size 967KB
              • SHA256 17781c7ae36c8a49f68c1ee17c19a5eef0ac51c8ee4c0dd383b780b27a3e6203
              • MD5 SHA1 SHA512 SSDEEP TLSH

              F1E0EF5AE0825964AE271B63F70022F6E6E3CDB6

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\F1E0EF5AE0825964AE271B63F70022F6E6E3CDB6
              • Size 21KB
              • SHA256 06ea4277454d14eb8fe347f04fb5db65a4fcd559516fcb9ae3d907b9268e752f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              F217B69C3AE55CADDC8D3209DF17F7A26BF1BAB1

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\F217B69C3AE55CADDC8D3209DF17F7A26BF1BAB1
              • Size 382KB
              • SHA256 2d3ad525d5081988cb30c31a064e539c79004c07aaf9c7224f63c2dd9f0197c8
              • MD5 SHA1 SHA512 SSDEEP TLSH

              F79D68A39E294ADFE91A8B49D55E9E973287FC91

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\cache2\entries\F79D68A39E294ADFE91A8B49D55E9E973287FC91
              • Size 341KB
              • SHA256 d450b12cb6b3fd3d17ddc84e6fb6328cf4f6171a2f6e159fd13a538173ea8298
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sFKuM1HXAtkXCGcioKdML49+V1GwjZOSgy12iFVHTR4=.ico

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\jumpListCache\sFKuM1HXAtkXCGcioKdML49+V1GwjZOSgy12iFVHTR4=.ico
              • Size 636B
              • SHA256 509e14b32a329d22c7a18a3245a5477c42e94220586c89486ee54a7f4666ceb4
              • MD5 SHA1 SHA512 TLSH

              nb_model_build_attachment_arts_and_entertainment.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
              • Size 67KB
              • SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_autos_and_vehicles.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
              • Size 44KB
              • SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_beauty_and_fitness.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
              • Size 33KB
              • SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_blogging_resources_and_services.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
              • Size 33KB
              • SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_books_and_literature.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
              • Size 67KB
              • SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_business_and_industrial.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
              • Size 45KB
              • SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_computers_and_electronics.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
              • Size 45KB
              • SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_finance.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_finance.json
              • Size 33KB
              • SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_food_and_drink.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
              • Size 67KB
              • SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_games.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_games.json
              • Size 44KB
              • SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_health.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_health.json
              • Size 33KB
              • SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_hobbies_and_leisure.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
              • Size 67KB
              • SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_home_and_garden.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
              • Size 33KB
              • SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_internet_and_telecom.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
              • Size 67KB
              • SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_jobs_and_education.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
              • Size 33KB
              • SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_law_and_government.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
              • Size 68KB
              • SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_online_communities.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_online_communities.json
              • Size 67KB
              • SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_people_and_society.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
              • Size 45KB
              • SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_pets_and_animals.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
              • Size 44KB
              • SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_real_estate.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_real_estate.json
              • Size 67KB
              • SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_reference.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_reference.json
              • Size 56KB
              • SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_science.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_science.json
              • Size 56KB
              • SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_shopping.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_shopping.json
              • Size 67KB
              • SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_sports.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_sports.json
              • Size 56KB
              • SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb_model_build_attachment_travel.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\nb_model_build_attachment_travel.json
              • Size 67KB
              • SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recipe_attachment.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\personality-provider\recipe_attachment.json
              • Size 1KB
              • SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
              • MD5 SHA1 SHA512 TLSH

              webext.sc.lz4

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\startupCache\webext.sc.lz4
              • Size 132KB
              • SHA256 c5eccdc0a9e78a5fa417bcfe7fae6450c860d40e09bc6bc738c4a78c15d14144
              • MD5 SHA1 SHA512 SSDEEP TLSH

              711366a4225c4e5cf17711508896040c.png

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\thumbnails\711366a4225c4e5cf17711508896040c.png
              • Size 17KB
              • SHA256 cb8d51c2650faa57f487ffaa360e1bd7778362e927f273846d4596941ae93fdc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              a7b5f74f766bc2b75b85bb1001425ae0.png

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\thumbnails\a7b5f74f766bc2b75b85bb1001425ae0.png
              • Size 30KB
              • SHA256 5939e6cb52731d5f1d0d4e14eec24f6ebd74438559f7048ab7df7063fba1d5f0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              e633322c-fb02-461d-b939-27b5f874bf6e.zip

              • Path C:\Users\Admin\AppData\Local\Temp\e633322c-fb02-461d-b939-27b5f874bf6e.zip
              • Size 3.7MB
              • SHA256 af9706aaf2d0e4ca1f1e61133a874b82399bc07a3ca5c0989b282fc708550f22
              • MD5 SHA1 SHA512 SSDEEP TLSH

              remote-settings-startup-bundle-

              • Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
              • Size 555KB
              • SHA256 dd1bf21a80273a2a50f0cb6407206d40b6c72ea4cb7f37bc2e23f9aaa70834de
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tmp-2t1.xpi

              • Path C:\Users\Admin\AppData\Local\Temp\tmp-2t1.xpi
              • Size 4.2MB
              • SHA256 919648f04bcef38bd4cf209fe68f6e95f496ef72c715e855ed9dfa597c76baf1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tmpaddon

              • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
              • Size 502KB
              • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tmpaddon

              • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
              • Size 11KB
              • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
              • MD5 SHA1 SHA512 SSDEEP TLSH

              6824f4a902c78fbd.customDestinations-ms

              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
              • Size 20KB
              • SHA256 69d246c65c256713afbec738f9567e5bc17e9e711e7ce4d5b77216f302de72db
              • MD5 SHA1 SHA512 SSDEEP TLSH

              6824f4a902c78fbd.customDestinations-ms

              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
              • Size 20KB
              • SHA256 0b27758c1f7120bbc35348431db29dcc00c27a0233303742350a9a5ac29af16a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              6824f4a902c78fbd.customDestinations-ms

              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
              • Size 20KB
              • SHA256 78f8306c252d54d91809b980425e8e0aa3a94f266ec2ec516fab4185d24f34ca
              • MD5 SHA1 SHA512 SSDEEP TLSH

              6824f4a902c78fbd.customDestinations-ms

              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
              • Size 20KB
              • SHA256 f285d3ca1efaaa4ca220c1e661cb0be660841bb406eb518b0ae6eea19902e4da
              • MD5 SHA1 SHA512 SSDEEP TLSH

              XTPJXMTUYDTPB6A1LONF.temp

              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XTPJXMTUYDTPB6A1LONF.temp
              • Size 18KB
              • SHA256 d110e626e297ffd137ad8480c5f2a0a8e22a21b4c5a56bcd51decba33466adcd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AlternateServices.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\AlternateServices.bin
              • Size 20KB
              • SHA256 78ba8fe3e7b114132baf2ad3f2c68a9bbd3e82213f114e24a8d9bedb43c22d5b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AlternateServices.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\AlternateServices.bin
              • Size 21KB
              • SHA256 db65729f1f2555cd0c420fc48a9bddd22d3c560f1babf9600bf3aa1511774721
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AlternateServices.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\AlternateServices.bin
              • Size 8KB
              • SHA256 928cc9c87e21804ba9523dbab7251db7b6876a5052cf075d6c4cb62fe73b1d85
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AlternateServices.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\AlternateServices.bin
              • Size 21KB
              • SHA256 5366efdff6c695a56c7ec45f1a6ba128b74334d1681f9012fd1d30f1216a99cf
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AlternateServices.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\AlternateServices.bin
              • Size 21KB
              • SHA256 f15194e4356f2435caea5a2cda713a9941204b869b6e5466ae207adc8f89ae88
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AlternateServices.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\AlternateServices.bin
              • Size 21KB
              • SHA256 d511a61b8a878456960185a5affd7b8e05f7ce0dd928472607730391d8465bb5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AlternateServices.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\AlternateServices.bin
              • Size 21KB
              • SHA256 8fc3989e697c2a0cef7ce1c503e06325fd59e31d7370cb7d69efabf133b8f49a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AlternateServices.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\AlternateServices.bin
              • Size 21KB
              • SHA256 22d05e25530d9999ae38e461816eb177e8884387b08a5983a44b3a6adfb85010
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AlternateServices.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\AlternateServices.bin
              • Size 21KB
              • SHA256 43f67ea3024455d9e6f4d9f1a8f8a08ac28cb834138d13234a89af2c7bb7fabd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AlternateServices.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\AlternateServices.bin
              • Size 21KB
              • SHA256 99eb5238fe8d3a94761753b29ec3be49eddafcbad28565db08e12d79d478d1ab
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AlternateServices.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\AlternateServices.bin
              • Size 21KB
              • SHA256 657150d3b9553d618a069c92dd04f7f6e045871d142104c361d3a4dbaf730c8b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AlternateServices.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\AlternateServices.bin
              • Size 21KB
              • SHA256 5d9edb638a1c77a198563e54c7c7ed3a9aa3b1814c44a9056f245e45cff76576
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AlternateServices.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\AlternateServices.bin
              • Size 21KB
              • SHA256 33d054b7bb397910254f8a52ba696358254e4d5c4ceff84ac880d59ccfec1021
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AlternateServices.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\AlternateServices.bin
              • Size 23KB
              • SHA256 91db61936700895aaaeeb433d2136e419175e016e44c42922492ccef89f2006e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              SiteSecurityServiceState.bin

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\SiteSecurityServiceState.bin
              • Size 5KB
              • SHA256 236189e36cbeff51d170f685324ff1af3089859b14627199e4a75e8315e6b946
              • MD5 SHA1 SHA512 SSDEEP TLSH

              addonStartup.json.lz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\addonStartup.json.lz4
              • Size 5KB
              • SHA256 55fd3cf06f5a12589693b9184703a996b374d93bd4eb410bfbf1647cabcaec07
              • MD5 SHA1 SHA512 SSDEEP TLSH

              bookmarks-2026-08-04_10_y-I-SDYb-tcvuUaOvsamk_hRv6sg6KLydRGZyYEg3iI=.jsonlz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\bookmarkbackups\bookmarks-2026-08-04_10_y-I-SDYb-tcvuUaOvsamk_hRv6sg6KLydRGZyYEg3iI=.jsonlz4
              • Size 862B
              • SHA256 f7ecc9867cbe66bb666094e16a23a38a451546cf2de8c221ee2f907d2ac44288
              • MD5 SHA1 SHA512 TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 5KB
              • SHA256 b0b2e71ba747a488a344b46f2d4b8df3241962cd432a98aacad9bc9d51837067
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 119KB
              • SHA256 e1fd6615ac4c8eef93572f807acfebe5c53a85d3b21cd59d96083dd357eeb419
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 6KB
              • SHA256 33b4511442f3b2872611013198df2ee168aa202df5ba7f9fe7cdb2af56e88d51
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 195KB
              • SHA256 cefe96b3fb9130924f0744974f54349990269709654410741b6d67724577f7d6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 137KB
              • SHA256 abe256a74f4d454efac959e175fa7a9a4017bfcbdf055466934694750d50f09e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 203KB
              • SHA256 1b039044ed2d3a564e1efabb528c6a14b7513fa844e48615ec4a8d6fee39259d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 7KB
              • SHA256 4303a99adffeef7a921889b31f1adc95c999d359c5f9faa43e0c680f4241bb62
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 137KB
              • SHA256 0bf74cc77dcc9ecfa9bfaa5ee2ddfc8d0ff7d16b024ca227afa0c7d6de695d10
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 203KB
              • SHA256 07bf041325725502956390fcfd19312ed2ce034891545213c08ebcdf3bb01ed5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 174KB
              • SHA256 d20a94a63e6573118e39bcecef1edb25c283425dca495979ec38a5408a1523aa
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 137KB
              • SHA256 dc6f7d857b40a3f5a98707f066924138ce3d2f5d36918b1a595007beae9fd750
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 7KB
              • SHA256 2574f4d2c8eb49fd62c7639c460cf8942fdbc3722c7eca5b8dd980efa3eed3d7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 7KB
              • SHA256 5d95856f1ad75dc571f53361a96345ff7ac8a086b8ccf1ebb5428952a4168c79
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 7KB
              • SHA256 69a9b7d3a81dd5b254f46c4626e26cb8782aaa2981d598b81a7ccac33ef20af4
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\db\data.safe.tmp
              • Size 3KB
              • SHA256 c37eeb1fb35688b506a92d675f37a0b0918432c6a3630bd4a6792223abc5d5ed
              • MD5 SHA1 SHA512 TLSH

              events

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\events\events
              • Size 5KB
              • SHA256 3d86de9db9b8ddd5de4a5d8200cfcda59e7bd9d54af10e15d3ddd7a7cb0f4cd5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              events

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\events\events
              • Size 1KB
              • SHA256 5b1ec3bbe878520cdc02a881d4cf56f2bc6e05bf2f2b7a40ffef9d32a9d6b41d
              • MD5 SHA1 SHA512 TLSH

              pageload

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\events\pageload
              • Size 5KB
              • SHA256 677516672d84c17976ca712e3c00d52627f0e0f420d4703a087c4b6a9c1a6a72
              • MD5 SHA1 SHA512 SSDEEP TLSH

              00893d66-2d50-4bee-b251-a50879a2f948

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\pending_pings\00893d66-2d50-4bee-b251-a50879a2f948
              • Size 235B
              • SHA256 0d6a7af5972c49d208ebb1baecd530cdb61c4fba145596356c213ea25a52579b
              • MD5 SHA1 SHA512 TLSH

              15e110a5-e574-4c19-9f81-d9554f2d4f63

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\pending_pings\15e110a5-e574-4c19-9f81-d9554f2d4f63
              • Size 1008B
              • SHA256 7b53c0d8920414577ab7de58950eb8a95a22f45e51ce47b284fb4a1159c023a0
              • MD5 SHA1 SHA512 TLSH

              2b018b7e-1a4f-4170-bd3c-c3f6975806b1

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\pending_pings\2b018b7e-1a4f-4170-bd3c-c3f6975806b1
              • Size 2KB
              • SHA256 f025e2d777145a29f3a7a26ebb982184efe313f5f4e937f7eec0f474e8fbc035
              • MD5 SHA1 SHA512 TLSH

              4603bf60-8086-4726-80ab-69753e71a3f4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\pending_pings\4603bf60-8086-4726-80ab-69753e71a3f4
              • Size 15KB
              • SHA256 9d2ead5da8e7d12d434141400a9fa1f44951f5bf57ae4615390455a5ebb9220e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              631e3f79-4bc2-482d-987f-a4a4a5542507

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\pending_pings\631e3f79-4bc2-482d-987f-a4a4a5542507
              • Size 16KB
              • SHA256 1457ac99e37a754f6f3c2cc6042d40d0cb91df0ff1b9f19beff697cd333e0ab0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              6bc8362c-9c7d-47db-aad5-f4e189aea0f8

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\pending_pings\6bc8362c-9c7d-47db-aad5-f4e189aea0f8
              • Size 281B
              • SHA256 c770648a2fad5f30cfba416e2b544d07c46581ba1593d9a5d784acc93794c323
              • MD5 SHA1 SHA512 TLSH

              811c7d40-7b75-4d66-b263-d8ac421dc36d

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\pending_pings\811c7d40-7b75-4d66-b263-d8ac421dc36d
              • Size 235B
              • SHA256 a43c13ab46976b34f92625bae6f7f0455d597038425088e0268f63685aaa76ec
              • MD5 SHA1 SHA512 TLSH

              d52e05e3-578f-4198-a13c-59efe66797ae

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\pending_pings\d52e05e3-578f-4198-a13c-59efe66797ae
              • Size 883B
              • SHA256 f40715bcba8451f534238c8eec9160055a05b7a45307c842a49b4a84c1c88843
              • MD5 SHA1 SHA512 TLSH

              f0ad6f33-9175-4a7c-8148-cb88b38978e4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\datareporting\glean\pending_pings\f0ad6f33-9175-4a7c-8148-cb88b38978e4
              • Size 886B
              • SHA256 bc9302a6bffaa3da3089b164b22a0c55061aeacaa2844089e81aa1780dd81614
              • MD5 SHA1 SHA512 TLSH

              extension-preferences.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\extension-preferences.json
              • Size 942B
              • SHA256 ba2da3c2e48d77af558a475a59dc7fa14a1e721bf6a2aeaeaf59682f840d7137
              • MD5 SHA1 SHA512 TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\extension-store-menus\data.safe.tmp
              • Size 2KB
              • SHA256 9b6f8eabfbbb61e9f66eb2b929418495ff1e68660cdd512b33b3b9f9338e81ed
              • MD5 SHA1 SHA512 TLSH

              extensions.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\extensions.json
              • Size 19KB
              • SHA256 724a43ff879dccf85de2120b0e6848c6b3f72f7641bfc34b55aa584fc317f284
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gmpopenh264.dll

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
              • Size 1.1MB
              • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gmpopenh264.info

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
              • Size 116B
              • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\gmp-widevinecdm\4.10.2830.0\manifest.json
              • Size 1001B
              • SHA256 25a702dd5389cc7b077c6b4e06c1fad9bdea74a9c37453388986d093c277d827
              • MD5 SHA1 SHA512 TLSH

              widevinecdm.dll

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\gmp-widevinecdm\4.10.2830.0\widevinecdm.dll
              • Size 18.3MB
              • SHA256 eb98fa2cfe142976b33fc3e15cf38a391f079e01cf61a82577b15107a98dea02
              • MD5 SHA1 SHA512 SSDEEP TLSH

              LICENSE

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
              • Size 473B
              • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
              • Size 1002B
              • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
              • MD5 SHA1 SHA512 TLSH

              widevinecdm.dll

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
              • Size 21.6MB
              • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
              • MD5 SHA1 SHA512 SSDEEP TLSH

              widevinecdm.dll.sig

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
              • Size 1KB
              • SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
              • MD5 SHA1 SHA512 TLSH

              prefs-1.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\prefs-1.js
              • Size 12KB
              • SHA256 914b0ca69130a79c56540e522fbb70e2cc12899be833e8a62c2e60960bc1b746
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs-1.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\prefs-1.js
              • Size 6KB
              • SHA256 59f970190bf637ebd2d45cfe0233132ef94cd0eedfe0a3a23b4d15397121c8ce
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs-1.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\prefs-1.js
              • Size 7KB
              • SHA256 0df1484c47daf33a51ffc134c48979bff31725b6621472d5a0ea552ac7c75a5f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs-1.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\prefs-1.js
              • Size 8KB
              • SHA256 3aeab183fd3bf6e85db49846600252ea40180b7e7e975dc6c4785cbab1775656
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs-1.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\prefs-1.js
              • Size 13KB
              • SHA256 451d78391d6c531b0678889208548a4f6153e85ccd3e1197b09ee8e59affe870
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs-1.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\prefs-1.js
              • Size 13KB
              • SHA256 ead930c1492a869ca8daa14c4c5cabe5637bc590d59a1ae1dfa8b47d4a11e7af
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs-1.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\prefs-1.js
              • Size 8KB
              • SHA256 226f0666ccee18fed6b0ede7f4581c2be9e3f6b9438ec2fa7372a0a7259367f1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs-1.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\prefs-1.js
              • Size 13KB
              • SHA256 ad11a545de02e381ac2f5d0123fd87415e29f344eb8e17df996d5423af1ee337
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs-1.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\prefs-1.js
              • Size 6KB
              • SHA256 3aa02f83a4553ece2d6d01316b741bd8603af0eee59b4ad00ea09a9d0bccaa93
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs-1.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\prefs-1.js
              • Size 7KB
              • SHA256 b36713845a9cb9247b3c8d317b44ab4d397f5b01d758c0ca98535c94c49bc765
              • MD5 SHA1 SHA512 SSDEEP TLSH

              search.json.mozlz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\search.json.mozlz4
              • Size 387B
              • SHA256 5c416e53beb16f9fc3fba735e2a89283ca5f0e84221c81133ceacd066128706e
              • MD5 SHA1 SHA512 TLSH

              serviceworker-1.txt

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\serviceworker-1.txt
              • Size 353B
              • SHA256 7620476628cb952c0222a7886516f4c39a6c7d4d75514f522674d35e2dc3569b
              • MD5 SHA1 SHA512 TLSH

              serviceworker.txt

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\serviceworker.txt
              • Size 193B
              • SHA256 f1dcd96c5d446e9294a4f3f9bd330a0f7eb2f31a49d632b39ffdf57f1a58ea46
              • MD5 SHA1 SHA512 TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 13KB
              • SHA256 5888b1e030e7d160c30cdd9de5d878885e0fdec9e17b88608c5d33487b1c12c2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 13KB
              • SHA256 ca62e9a67a2dc71ab443ca3a2e63d883a373379ba1868a5328fa4db044ab0ca8
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 13KB
              • SHA256 9023232bc1bc1140ee03e5c5a1d991ee7f8daa196a87c82675db824eae4b335c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 13KB
              • SHA256 d58f13c9d5af0a2055796178002f01bb385d9f68f8d38996c2a1bcc0617298c0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 13KB
              • SHA256 a754d59794b56c66d3806ecd2df8cb6cd6ef7a36f04822a22c2ccdfce99b6f50
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 1KB
              • SHA256 aac09d8bfb5c343790560ae295c0e0ac24caa91a6f01e54cff3c16af303204a9
              • MD5 SHA1 SHA512 TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 6KB
              • SHA256 adc4319489376a82564bc58968c60ba4f2843baad91d3ecf1b747adbb089b2e7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 14KB
              • SHA256 ea61ff8cac06bde52ce464227addcf63ed100d0e867c6d9b4a1069d3bcc64f61
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 9KB
              • SHA256 d68a5005025e6da50439dd17e8f90c06e52bf0c9ada87a470ec73b967d87fea7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 14KB
              • SHA256 4dcfed2cb8a8a2ef891db9eeb069a6dd323d7d825b5592f3476f90d3c7bedddb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 13KB
              • SHA256 4f5d65c28633f13510314383f19b41742fa8b208390f759af5293faf9f7e3add
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 18KB
              • SHA256 21b968451f3b0eec83e880ce58a22e3de5834810c9bcc33760e0f4b7a4d3f2d5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 13KB
              • SHA256 2428a8137807cd3e85ee043032f3945b67e2b1d05a3535af2d305239405ae4c0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 18KB
              • SHA256 60ab58fcad28dceb8719bcfb69e308a893ba2b17b4ec578a160cf7154c85cb58
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 13KB
              • SHA256 3a2454f2d050e970a629b3d846834a843bf2116106810a1771a118716fb41805
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 18KB
              • SHA256 e388e72ed43b55e4ed5bed886f5f50bac56e6eaf4980d0c388e271bb6921e904
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 13KB
              • SHA256 3aa4ae5b7ddec0732b95fb39c7a4fb7a10b7642c11639ddc09b62ec00fa1ff1f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 23KB
              • SHA256 7f965a3400dd7686e4b886741206f51da35e3e4808da465c416b47213f4e0b95
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 14KB
              • SHA256 ab59c17e223ca0fcb4163722811fa6bcbc815e2a0b1233831a3922e29a16ce73
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 29KB
              • SHA256 9d662f0138a8a497344abdf606a7cf3235eae875caaf0f6cdbd0c0a523aec032
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 14KB
              • SHA256 22d62c94b4feed065530535a97bcd2ec22de5a9dcd3a841acd828a3429bc9518
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 31KB
              • SHA256 a5a066dc87304b3a42409902ec8da5dccc112fcd23f48cb5ec8639b431032592
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 14KB
              • SHA256 282464ed78b2871f8845786cf9ca2b732383c3cba057ebd0e5b9a01a2efd3f12
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 44KB
              • SHA256 5fdf17bbb70d967ae810e216a84add293ca03d4e4c6849d74bd4ecb5f43f3619
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 20KB
              • SHA256 4f4118eef0ad05a49c0ff25ac15d5ee374585cd88a6876565bb987ab53934c67
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 44KB
              • SHA256 bad9257f38cb9835022dcab0ddbb5a8a06d9748482598068d30cc7441d32b6b3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 44KB
              • SHA256 c9f787ef79cc762bf0920eda150cfe50de445be38a400d0aa8e6bb26c6c93fde
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 18KB
              • SHA256 a6c8022e6887fa2abe27908ae7b911f562e1285539c6e2d7f54727440eb963f9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 20KB
              • SHA256 0367cbd68479bbb0c7c320f9d5d35157e3c8952a8263ac27c8b0bb34d5037449
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 23KB
              • SHA256 6b0777c07204e5134f7f975ec5ccf831bded2d8093a32621de2cf77442052e32
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 30KB
              • SHA256 76d8f9fa31a0c6d6933f4afb7f7571da02c67b5a34ad67bff162eab3c2fe05d9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 32KB
              • SHA256 af77bac53fd13389d0c8775bbe9665c6a977293eb81a01d3010a09d261f36316
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 44KB
              • SHA256 f1182b66ce61547355311c49b4339566eb4571d56a7ae1882daafd9f829992ec
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.baklz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.baklz4
              • Size 44KB
              • SHA256 3658c5699a3726892cd9498dd4f774db74bcd54957e06bdd6669a2b158416e1d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              recovery.jsonlz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\sessionstore-backups\recovery.jsonlz4
              • Size 13KB
              • SHA256 257b34780ce50a2b824662887097bf2a35a13980a3bc947dc6d18a9c52e17b35
              • MD5 SHA1 SHA512 SSDEEP TLSH

              {706d5323-b88a-4d13-bd29-b97b2a076e88}.final

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\storage\default\https+++scatbook.com\cache\morgue\136\{706d5323-b88a-4d13-bd29-b97b2a076e88}.final
              • Size 1KB
              • SHA256 ffae7b2391a116e10d7549ce6cae4bdece7eedd14ac36fc7b523eae2422ba493
              • MD5 SHA1 SHA512 TLSH

              {3cec3722-d9f4-4c1f-89e9-44b9d3e98d19}.final

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\storage\default\https+++www.reddit.com\cache\morgue\25\{3cec3722-d9f4-4c1f-89e9-44b9d3e98d19}.final
              • Size 3KB
              • SHA256 5f0b6209279f23863b12c67c4f902822bd6508487a3835197c66d2f4303158ba
              • MD5 SHA1 SHA512 TLSH

              1

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\storage\default\moz-extension+++fd850085-1008-47fb-bbed-3869524d29c9\idb\315553802esnegni.files\1
              • Size 977KB
              • SHA256 6959c09b2fcb334082e480c53c955dd775d50e83350abc7950441136548a58ab
              • MD5 SHA1 SHA512 SSDEEP TLSH

              2

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\storage\default\moz-extension+++fd850085-1008-47fb-bbed-3869524d29c9\idb\315553802esnegni.files\2
              • Size 1.3MB
              • SHA256 e5e4436da98ad9bcf45a7a21a305e98d4d938697ece27eded806ae1be3ed5e08
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\storage\default\moz-extension+++fd850085-1008-47fb-bbed-3869524d29c9\idb\315553802esnegni.files\3
              • Size 1.3MB
              • SHA256 80b95fdda5ab6935fa41cc6d7f71c7b25b62e6f5929cc247269e81c035b5e299
              • MD5 SHA1 SHA512 SSDEEP TLSH

              4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\storage\default\moz-extension+++fd850085-1008-47fb-bbed-3869524d29c9\idb\315553802esnegni.files\4
              • Size 3.0MB
              • SHA256 ff5731f11a1cb95f718c02215e947bd50ce114130902b3a454f588b09a8a4016
              • MD5 SHA1 SHA512 SSDEEP TLSH

              5

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\storage\default\moz-extension+++fd850085-1008-47fb-bbed-3869524d29c9\idb\315553802esnegni.files\5
              • Size 5.5MB
              • SHA256 79605d606b2fd585a4892920adc23baecf265361abde292d1c29ef39c739193e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              315553802esnegni.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\storage\default\moz-extension+++fd850085-1008-47fb-bbed-3869524d29c9\idb\315553802esnegni.sqlite
              • Size 280KB
              • SHA256 327d3231cfea15f1fcd7df16b952234013c892561b171f38510541031d6b556f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              388818605isntshig.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\storage\default\moz-extension+++fd850085-1008-47fb-bbed-3869524d29c9\idb\388818605isntshig.sqlite
              • Size 48KB
              • SHA256 8d39b3fa7a56ffb08e44cbe29905eec761625024a864bdedca779b666d94c36f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3647222921wleabcEoxlt-eengsairo.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\storage\default\moz-extension+++fd850085-1008-47fb-bbed-3869524d29c9^userContextId=4294967295\idb\3647222921wleabcEoxlt-eengsairo.sqlite
              • Size 48KB
              • SHA256 fbf40ea0db0b4dd9ba11c9927aab878c1901976a0b028e1d5c48ed5e36921efb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3870112724rsegmnoittet-es.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
              • Size 10.8MB
              • SHA256 7c5c3011682510c27f242895d14e74196b5c0bb72e75acbe36e9926f4b6a5860
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3870112724rsegmnoittet-es.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
              • Size 4.1MB
              • SHA256 bfb64737a090c083e7918772266b1bcc6e77eee2db7529cbc2b03548b4bf6021
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3870112724rsegmnoittet-es.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
              • Size 17.3MB
              • SHA256 4811f928be2aaf38b1f6b5ed94403021298bcb2ccb2fa162cd5a3de6165d1d0d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              xulstore.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jpqq5mgm.default-release\xulstore.json
              • Size 170B
              • SHA256 824b37fb029b3460c8dee14ac1afbbb0f2a5b90101a109ad3d824bc82966f647
              • MD5 SHA1 SHA512 TLSH