hxxp://google[.]com

Resubmissions

16/08/2026, 11:52

260816-n1ppjsxtcw6

16/08/2026, 11:50

260816-nz1enaxtb14

Analysis

user interaction
yes
max time kernel
898s
max time network
800s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/08/2026, 11:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample260816-n1ppjsxtcw

Score

6^/10

persistence

Malware Config

Signatures

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Checks processor information in registry 2 TTPs 64 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Moniker = "fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\DisplayName = "Chrome Sandbox"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Children	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f\Children	firefox.exe

Suspicious use of AdjustPrivilegeToken 9 IoCs

description	pid	Process
Token: SeDebugPrivilege	2384	firefox.exe
Token: SeDebugPrivilege	2384	firefox.exe
Token: SeDebugPrivilege	2384	firefox.exe
Token: SeDebugPrivilege	2384	firefox.exe
Token: SeDebugPrivilege	2384	firefox.exe
Token: SeDebugPrivilege	2384	firefox.exe
Token: SeDebugPrivilege	2384	firefox.exe
Token: SeDebugPrivilege	2384	firefox.exe
Token: SeDebugPrivilege	2384	firefox.exe

Suspicious use of FindShellTrayWindow 15 IoCs

pid	Process
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
2384	firefox.exe
2384	firefox.exe

Suspicious use of SetWindowsHookEx 10 IoCs

pid	Process
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe
2384	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2340 wrote to memory of 2384	2340	firefox.exe	87
PID 2340 wrote to memory of 2384	2340	firefox.exe	87
PID 2384 wrote to memory of 4204	2384	firefox.exe	88
PID 2384 wrote to memory of 4204	2384	firefox.exe	88
PID 2384 wrote to memory of 4204	2384	firefox.exe	88
PID 2384 wrote to memory of 4524	2384	firefox.exe	89
PID 2384 wrote to memory of 4524	2384	firefox.exe	89
PID 2384 wrote to memory of 4524	2384	firefox.exe	89
PID 2384 wrote to memory of 4524	2384	firefox.exe	89
PID 2384 wrote to memory of 3740	2384	firefox.exe	90
PID 2384 wrote to memory of 3740	2384	firefox.exe	90
PID 2384 wrote to memory of 3740	2384	firefox.exe	90
PID 2384 wrote to memory of 3740	2384	firefox.exe	90
PID 2384 wrote to memory of 3840	2384	firefox.exe	91
PID 2384 wrote to memory of 3840	2384	firefox.exe	91
PID 2384 wrote to memory of 3840	2384	firefox.exe	91
PID 2384 wrote to memory of 4580	2384	firefox.exe	92
PID 2384 wrote to memory of 4580	2384	firefox.exe	92
PID 2384 wrote to memory of 4580	2384	firefox.exe	92
PID 2384 wrote to memory of 4580	2384	firefox.exe	92
PID 2384 wrote to memory of 3636	2384	firefox.exe	93
PID 2384 wrote to memory of 3636	2384	firefox.exe	93
PID 2384 wrote to memory of 3636	2384	firefox.exe	93
PID 2384 wrote to memory of 3636	2384	firefox.exe	93
PID 2384 wrote to memory of 3460	2384	firefox.exe	94
PID 2384 wrote to memory of 3460	2384	firefox.exe	94
PID 2384 wrote to memory of 3460	2384	firefox.exe	94
PID 2384 wrote to memory of 3460	2384	firefox.exe	94
PID 2384 wrote to memory of 5176	2384	firefox.exe	95
PID 2384 wrote to memory of 5176	2384	firefox.exe	95
PID 2384 wrote to memory of 5176	2384	firefox.exe	95
PID 2384 wrote to memory of 5176	2384	firefox.exe	95
PID 2384 wrote to memory of 5520	2384	firefox.exe	96
PID 2384 wrote to memory of 5520	2384	firefox.exe	96
PID 2384 wrote to memory of 5520	2384	firefox.exe	96
PID 2384 wrote to memory of 5520	2384	firefox.exe	96
PID 2384 wrote to memory of 5532	2384	firefox.exe	97
PID 2384 wrote to memory of 5532	2384	firefox.exe	97
PID 2384 wrote to memory of 5532	2384	firefox.exe	97
PID 2384 wrote to memory of 5532	2384	firefox.exe	97
PID 2384 wrote to memory of 2288	2384	firefox.exe	98
PID 2384 wrote to memory of 2288	2384	firefox.exe	98
PID 2384 wrote to memory of 2288	2384	firefox.exe	98
PID 2384 wrote to memory of 2288	2384	firefox.exe	98
PID 2384 wrote to memory of 4424	2384	firefox.exe	99
PID 2384 wrote to memory of 4424	2384	firefox.exe	99
PID 2384 wrote to memory of 4424	2384	firefox.exe	99
PID 2384 wrote to memory of 4424	2384	firefox.exe	99
PID 2384 wrote to memory of 5364	2384	firefox.exe	100
PID 2384 wrote to memory of 5364	2384	firefox.exe	100
PID 2384 wrote to memory of 5364	2384	firefox.exe	100
PID 2384 wrote to memory of 5364	2384	firefox.exe	100
PID 2384 wrote to memory of 4560	2384	firefox.exe	104
PID 2384 wrote to memory of 4560	2384	firefox.exe	104
PID 2384 wrote to memory of 4560	2384	firefox.exe	104
PID 2384 wrote to memory of 4560	2384	firefox.exe	104
PID 2384 wrote to memory of 5932	2384	firefox.exe	105
PID 2384 wrote to memory of 5932	2384	firefox.exe	105
PID 2384 wrote to memory of 5932	2384	firefox.exe	105
PID 2384 wrote to memory of 5932	2384	firefox.exe	105
PID 2384 wrote to memory of 4164	2384	firefox.exe	113
PID 2384 wrote to memory of 4164	2384	firefox.exe	113
PID 2384 wrote to memory of 4164	2384	firefox.exe	113
PID 2384 wrote to memory of 4164	2384	firefox.exe	113

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "http://google.com"
1⤵
- Suspicious use of WriteProcessMemory
PID:2340
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url http://google.com
  2⤵
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2384
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2008 -prefsLen 27099 -prefMapHandle 2012 -prefMapSize 270279 -ipcHandle 2100 -initialChannelId {9b2acd76-758b-4e7d-86cc-af7d941d4245} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4204
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2500 -prefsLen 27135 -prefMapHandle 2504 -prefMapSize 270279 -ipcHandle 2512 -initialChannelId {cf61b801-ed90-4ecd-89e3-688b9d60120a} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:4524
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3896 -prefsLen 25164 -prefMapHandle 3900 -prefMapSize 270279 -jsInitHandle 3904 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3912 -initialChannelId {0306ad07-a3bf-42d8-9721-b7063786dc33} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:3740
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4100 -prefsLen 27276 -prefMapHandle 4104 -prefMapSize 270279 -ipcHandle 4120 -initialChannelId {617c1ba6-663e-43a7-9e74-6c3b2d8a9eb8} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3840
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1640 -prefsLen 34775 -prefMapHandle 1676 -prefMapSize 270279 -jsInitHandle 2816 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2688 -initialChannelId {558c07fc-350e-4626-805b-8ab525ca1b83} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4580
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4768 -prefsLen 35012 -prefMapHandle 4492 -prefMapSize 270279 -ipcHandle 4820 -initialChannelId {ac263d3c-e57c-433f-973a-d3bae9f5acc0} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:3636
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4720 -prefsLen 32900 -prefMapHandle 4676 -prefMapSize 270279 -jsInitHandle 4716 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4936 -initialChannelId {82c8208f-9230-46e4-acff-16eccb083d52} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:3460
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5056 -prefsLen 32900 -prefMapHandle 5060 -prefMapSize 270279 -jsInitHandle 5064 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5156 -initialChannelId {2ea0f28f-669a-4da5-866d-129da2af9094} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5176
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4764 -prefsLen 32952 -prefMapHandle 5348 -prefMapSize 270279 -jsInitHandle 5352 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4788 -initialChannelId {63da09ba-92d7-429a-8888-abe9efdfa117} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5520
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5368 -prefsLen 32952 -prefMapHandle 5392 -prefMapSize 270279 -jsInitHandle 5064 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3296 -initialChannelId {94d98b1a-7073-46b1-a9d5-73e95ecc5fc8} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5532
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5568 -prefsLen 35143 -prefMapHandle 5988 -prefMapSize 270279 -jsInitHandle 6100 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4068 -initialChannelId {492e967e-9e30-46c2-b347-4e3cce338107} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:2288
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4444 -prefsLen 33119 -prefMapHandle 4440 -prefMapSize 270279 -jsInitHandle 6428 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3028 -initialChannelId {2bceb9e8-3ee3-49fb-bbee-5e6fef3e439c} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:4424
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6748 -prefsLen 33119 -prefMapHandle 6856 -prefMapSize 270279 -jsInitHandle 6828 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6780 -initialChannelId {7b794233-4c4f-497e-960a-5cb454b2c916} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:5364
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6680 -prefsLen 34658 -prefMapHandle 5484 -prefMapSize 270279 -jsInitHandle 6976 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5828 -initialChannelId {d100c342-1674-47c5-ab4c-b19d984d450c} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    PID:4560
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 7160 -prefsLen 37931 -prefMapHandle 7164 -prefMapSize 270279 -ipcHandle 5536 -initialChannelId {21db5150-6a38-4fbf-b7e5-549058de14d5} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 utility
    3⤵
    - Checks processor information in registry
    PID:5932
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6636 -prefsLen 36806 -prefMapHandle 6640 -prefMapSize 270279 -jsInitHandle 6644 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2972 -initialChannelId {fb92b7a6-2d71-4986-b100-1b00ec2d2d2f} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
    3⤵
    - Checks processor information in registry
    PID:4164
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2968 -prefsLen 36806 -prefMapHandle 2768 -prefMapSize 270279 -jsInitHandle 3032 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3036 -initialChannelId {14db1250-27cf-4078-ade8-89215f810944} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
    3⤵
    - Checks processor information in registry
    PID:4496
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 7304 -prefsLen 39933 -prefMapHandle 7356 -prefMapSize 270279 -ipcHandle 7280 -initialChannelId {146b91b7-a042-4c2c-97c2-42c75034ae54} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 utility
    3⤵
    - Checks processor information in registry
    PID:5040
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2892 -prefsLen 36806 -prefMapHandle 7392 -prefMapSize 270279 -jsInitHandle 7488 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6824 -initialChannelId {64c5d97c-4557-49da-aeb7-ff8af17a0207} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
    3⤵
    - Checks processor information in registry
    PID:5872
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7616 -prefsLen 36806 -prefMapHandle 7604 -prefMapSize 270279 -jsInitHandle 7608 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7544 -initialChannelId {01abb6e0-ec7a-4a13-a8b4-fe07ee113a4f} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
    3⤵
    - Checks processor information in registry
    PID:4380
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6572 -prefsLen 36806 -prefMapHandle 6896 -prefMapSize 270279 -jsInitHandle 6776 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7572 -initialChannelId {89434a04-8128-4a11-b4d4-11898e5e0637} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
    3⤵
    PID:6008
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7340 -prefsLen 36806 -prefMapHandle 7336 -prefMapSize 270279 -jsInitHandle 6556 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7388 -initialChannelId {ef65c4ba-a6a6-470d-9168-443c457cbf6c} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
    3⤵
    - Checks processor information in registry
    PID:5468
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7068 -prefsLen 36806 -prefMapHandle 2768 -prefMapSize 270279 -jsInitHandle 7516 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7540 -initialChannelId {83b0b540-55de-4d65-9788-9f98977649ae} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 23 tab
    3⤵
    - Checks processor information in registry
    PID:5508
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5628 -prefsLen 36806 -prefMapHandle 5604 -prefMapSize 270279 -jsInitHandle 7592 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7596 -initialChannelId {7000d72b-f330-48df-8bcf-1569d57ecc1e} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 24 tab
    3⤵
    - Checks processor information in registry
    PID:4520
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6776 -prefsLen 36806 -prefMapHandle 7544 -prefMapSize 270279 -jsInitHandle 1496 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6580 -initialChannelId {48d59178-cf76-4cb2-8489-a0ea0891f531} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 25 tab
    3⤵
    - Checks processor information in registry
    PID:5420
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7768 -prefsLen 36806 -prefMapHandle 4444 -prefMapSize 270279 -jsInitHandle 7640 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7752 -initialChannelId {31c6a386-603c-4a9c-893b-c46ac72ccfa8} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 26 tab
    3⤵
    - Checks processor information in registry
    PID:5888
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7536 -prefsLen 36806 -prefMapHandle 4548 -prefMapSize 270279 -jsInitHandle 7532 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1620 -initialChannelId {d99039d2-d327-45f6-93df-139e883cb25c} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 27 tab
    3⤵
    PID:5532
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6468 -prefsLen 36806 -prefMapHandle 7592 -prefMapSize 270279 -jsInitHandle 5604 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7884 -initialChannelId {7bdd0159-3ca9-4c2a-9a27-23e2591a89af} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 28 tab
    3⤵
    - Checks processor information in registry
    PID:1104
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7960 -prefsLen 36806 -prefMapHandle 7984 -prefMapSize 270279 -jsInitHandle 1496 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7376 -initialChannelId {c73771d1-8608-40fa-b239-cbb5d340a4df} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 29 tab
    3⤵
    - Checks processor information in registry
    PID:2920
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6328 -prefsLen 36806 -prefMapHandle 7860 -prefMapSize 270279 -jsInitHandle 5768 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8156 -initialChannelId {b20bc59e-057f-478b-8666-967fe25745b9} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 30 tab
    3⤵
    - Checks processor information in registry
    PID:2264
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8016 -prefsLen 36806 -prefMapHandle 8012 -prefMapSize 270279 -jsInitHandle 8028 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7228 -initialChannelId {6a5d6c59-0dd0-49fd-b086-f116960c7c61} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 31 tab
    3⤵
    - Checks processor information in registry
    PID:652
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7188 -prefsLen 36966 -prefMapHandle 7948 -prefMapSize 270279 -jsInitHandle 5648 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6580 -initialChannelId {17e4ae29-c12a-47bc-a5e9-392fed60c34c} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 32 tab
    3⤵
    - Checks processor information in registry
    PID:3500
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7876 -prefsLen 36966 -prefMapHandle 6696 -prefMapSize 270279 -jsInitHandle 5604 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7600 -initialChannelId {ece36cac-d09f-4ec2-8a48-ae3f94354aee} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 33 tab
    3⤵
    - Checks processor information in registry
    PID:6100
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5200 -prefsLen 36966 -prefMapHandle 5268 -prefMapSize 270279 -jsInitHandle 5272 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7592 -initialChannelId {b18a89e7-df22-416e-913c-94cb6e723496} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 34 tab
    3⤵
    PID:5428
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5896 -prefsLen 36966 -prefMapHandle 7724 -prefMapSize 270279 -jsInitHandle 2972 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6160 -initialChannelId {71d27ab3-f3b7-476e-9be7-0181077954e0} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 35 tab
    3⤵
    - Checks processor information in registry
    PID:3472
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2972 -prefsLen 36966 -prefMapHandle 6864 -prefMapSize 270279 -jsInitHandle 7856 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6684 -initialChannelId {b0b2b1a9-67c9-4707-a21e-4e652762c1b4} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 36 tab
    3⤵
    - Checks processor information in registry
    PID:1128
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7804 -prefsLen 36966 -prefMapHandle 7336 -prefMapSize 270279 -jsInitHandle 7612 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2768 -initialChannelId {e721ff4b-47dd-4522-ac2e-75c33ffee45d} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 37 tab
    3⤵
    - Checks processor information in registry
    PID:5476
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7884 -prefsLen 36966 -prefMapHandle 7544 -prefMapSize 270279 -jsInitHandle 8068 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6856 -initialChannelId {d354258c-9108-45de-97db-2e62dae4b1da} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 38 tab
    3⤵
    - Checks processor information in registry
    PID:4340
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8292 -prefsLen 36966 -prefMapHandle 8296 -prefMapSize 270279 -jsInitHandle 8300 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8240 -initialChannelId {38a54525-cade-4db8-a1a7-378a205a439a} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 39 tab
    3⤵
    - Checks processor information in registry
    PID:4660
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8004 -prefsLen 36966 -prefMapHandle 5500 -prefMapSize 270279 -jsInitHandle 4716 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6804 -initialChannelId {7adf990e-8db0-4c08-9df3-6e03c4380ec0} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 40 tab
    3⤵
    - Checks processor information in registry
    PID:2216
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3076 -prefsLen 36966 -prefMapHandle 7772 -prefMapSize 270279 -jsInitHandle 7672 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7192 -initialChannelId {c271c297-28cd-4c54-aa68-4e10f8ec3a66} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 41 tab
    3⤵
    - Checks processor information in registry
    PID:5560
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6376 -prefsLen 36966 -prefMapHandle 5904 -prefMapSize 270279 -jsInitHandle 6852 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8492 -initialChannelId {e5fdd447-5aaf-4979-ac89-ce871a9ccc6a} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 42 tab
    3⤵
    - Checks processor information in registry
    PID:4292
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8480 -prefsLen 36966 -prefMapHandle 8460 -prefMapSize 270279 -jsInitHandle 8464 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8404 -initialChannelId {1b30682a-e1e9-41f3-ac4e-4f9336ec89da} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 43 tab
    3⤵
    - Checks processor information in registry
    PID:5340
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7664 -prefsLen 36966 -prefMapHandle 2768 -prefMapSize 270279 -jsInitHandle 6620 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6728 -initialChannelId {6a8ad352-51a5-4501-8f23-3e19b1641333} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 44 tab
    3⤵
    - Checks processor information in registry
    PID:5620
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8468 -prefsLen 36966 -prefMapHandle 6760 -prefMapSize 270279 -jsInitHandle 6484 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7056 -initialChannelId {b1ccab82-8284-41b0-9554-7d41232f389d} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 45 tab
    3⤵
    - Checks processor information in registry
    PID:5300
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4728 -prefsLen 36966 -prefMapHandle 5828 -prefMapSize 270279 -jsInitHandle 8396 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8520 -initialChannelId {86d7c1c2-8e4e-4967-8f28-d929360cf288} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 46 tab
    3⤵
    - Checks processor information in registry
    PID:6016
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6508 -prefsLen 36966 -prefMapHandle 7348 -prefMapSize 270279 -jsInitHandle 5820 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6728 -initialChannelId {2e1e6b7e-f3d5-49fe-9a5d-36b0c8f97b6f} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 47 tab
    3⤵
    - Checks processor information in registry
    PID:4288
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8456 -prefsLen 36966 -prefMapHandle 8312 -prefMapSize 270279 -jsInitHandle 8480 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6092 -initialChannelId {ecd67473-04ef-472e-a3dd-5e44dfae43c9} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 48 tab
    3⤵
    - Checks processor information in registry
    PID:5148
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6752 -prefsLen 36966 -prefMapHandle 6648 -prefMapSize 270279 -jsInitHandle 8256 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8324 -initialChannelId {3ae5c520-499f-4b78-bf87-f60f908d112d} -parentPid 2384 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2384" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 49 tab
    3⤵
    - Checks processor information in registry
    PID:6108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\activity-stream.contile.json
Size 5KB
SHA256 e906a1c7b433d92082626125842fdd54fa5ba9b3bda0d0aa47699970f29dd936
MD5 663132e2b0b66ab15cc1389802ccbb3f
SHA1 881045fa546dae26e6f5f9047f62daa8f9d7f71f
SHA512 97d5c7d3b0df71111e7b7a8a7e601f2ae08fe32a251cd4596369ef0fa0dabcf7997e83b1c9d0dadb0388923f68715915eb58b9d14dad40495a1f6332621fdad5
SSDEEP 96:TBOKMtA4oTAKtlYQmT+mR7FcqCKbZ8zQl37b:Hh/vtlvmR7Fc+am37b
TLSH
T1CCB1F89BD49045726713DAE41C0B3F8CF143B247D5D8D7ACA3EB9D32628831A41AD9CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\activity-stream.discovery_stream.json
Size 76KB
SHA256 761fdb784093dab2e5fd606636cabbdfe45da6d2431af534ba1a29e0074bde61
MD5 ae7ee8239e2d8e4d4d97b68551459a15
SHA1 c004177d458476baa2db83c3eee65a69d218daa1
SHA512 f394ff4e8d25799a75df88bbafd5184a20c4157c407c3c0c86db800a5b66b474616636d22fe8f14b0c17d36194fdda4a7e7b25c5be6d090c66a22095daac4ef0
SSDEEP 768:OKy1V+/ki9s0Qg55KPtYWJpj5KTsezhYdvneGr046hWzmG6:gD+99s0QX11JpITseNI7046wL6
TLSH
T1A9731AE39BA972FB1BD537C73C8B795B52E54249E34606C8ECADC61C80CD694023E5AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6D89348819C8881868053197CA0754F36784BF5F

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F
Size 16KB
SHA256 c0abf5a8e814c5b38ed880237684fb5f9c28148e928ed3911eb564e42ac17425
MD5 0635ff2d6f325277dbcd657ddb6c2a77
SHA1 adf0783e3fe8ef1db26821b0d785a953b6965aee
SHA512 07ef3a898f896a16835259e382a92058f2917fc40ae63063ce8d288a3320f10fdbd1ce1f1176e12a5c393337149daa34b97a59bd7f02fe5391702e990b8ad8a8
SSDEEP 384:mtSSKjgJ4IlP61hu1wdvNd9KVRaAcP+AWRMAn:mYr0J4IlP61hiwdvNmVAf+hRMg
TLSH
T1B5729E3B8F5058A91A1394F54C2E3BCC2C07F24B9BE8D6EC52AD3902D18979A95FC4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86DDBDE5E1EAFC4C588EE71FB531985C95CCC542

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\cache2\entries\86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
Size 16KB
SHA256 1cba00597e29c77464c2e0223a803120df0c031fdb9f024f2587f16e724dd5e0
MD5 a667fe5109409990294c6a7283dfc40a
SHA1 f924ee3bf37533245448e4b1db00468cee58af4c
SHA512 17aa4deea030aa3e8e303ca1775a8dc1cfaa47868b9dbc97bad859b491a9e93fbd9e38bef8b85dc03748a97fe81f5e302bdffc1b50e49aa6c1d30f53013be428
SSDEEP 384:HXkRyiO024Y9DL84KKDL849B7SOEAd9KVRaAcP+AWRMAVVN:3mZY9DL8lKDL8CB7S/AmVAf+hRM2VN
TLSH
T1BF728F3D5F003CAC25A780ECC5B982AA4D18BBA7DFE6C06D21583D0DC798969B5F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_arts_and_entertainment.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
Size 67KB
SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
MD5 6c651609d367b10d1b25ef4c5f2b3318
SHA1 0abcc756ea415abda969cd1e854e7e8ebeb6f2d4
SHA512 3e084452eefe14e58faa9ef0d9fda2d21af2c2ab1071ae23cde60527df8df43f701668ca0aa9d86f56630b0ab0ca8367803c968347880d674ad8217fba5d8915
SSDEEP 1536:X0A993SJAA1p1MxQm6UjfvidqqishTLaq/HU0Y6bxdgRYeHk2OxFW:EA993SiAv+F6UjHiddpLrAGS/GFW
TLSH
T17F63839547EF4AF1A2CEF9A40CA708936FF551F52BD2229C1BD1908897B5FB010F7A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_autos_and_vehicles.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
Size 44KB
SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
MD5 39b73a66581c5a481a64f4dedf5b4f5c
SHA1 90e4a0883bb3f050dba2fee218450390d46f35e2
SHA512 cfb697958e020282455ab7fabc6c325447db84ead0100d28b417b6a0e2455c9793fa624c23cb9b92dfea25124f59dcd1d5c1f43bf1703a0ad469106b755a7cdd
SSDEEP 768:x6/Mifb8i0x9bnuv97xrsEcgcs19DSr1euz5vciyxYZlhCU:x6pfExluv9NncNsb2r1lR6YZlsU
TLSH
T1062384A2A3EF4AF292CAF5E508A70C935F7662F51BC3309C07C1558C53BDEB504D6A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_beauty_and_fitness.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
Size 33KB
SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
MD5 0ed0473b23b5a9e7d1116e8d4d5ca567
SHA1 4eb5e948ac28453c4b90607e223f9e7d901301c4
SHA512 464508d7992edfa0dfb61b04cfc5909b7daacf094fc81745de4d03214b207224133e48750a710979445ee1a65bb791bf240a2b935aacaf3987e5c67ff2d8ba9c
SSDEEP 768:I+ij0TAXOc2OuXvdCDF4FmthuYb495/SvSEtEYNZQytSYfT2TDkEF4JRe9VUwCJd:I+ij0aOc21XvdQF4Fmthug495/SvSd4J
TLSH
T167F273A553EF4AF3A2CAF99448BB08D75B7501F42BD3309C0BD1954C57BDEB404E6A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_blogging_resources_and_services.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
Size 33KB
SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
MD5 c82700fcfcd9b5117176362d25f3e6f6
SHA1 a7ad40b40c7e8e5e11878f4702952a4014c5d22a
SHA512 d38e65ab55cee8fef538ad96448cd0c6b001563714fc7b37c69a424d0661ec6b7d04892cf4b76b13ddbc7d300c115e87e0134d47c3f38ef51617e5367647b217
SSDEEP 768:0aXqUUKuXcV9gAJYQjhAlF803mM4xRdOROo4ZParFJoLNUz73:0aXqjKuXw9gAJYQjyB3mtxRkco4Zyr37
TLSH
T18AF252A143EF4AF2A6CAFA9508B708D35B3551F52BC3319C0BD2954C57BDFB508D2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_books_and_literature.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
Size 67KB
SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
MD5 df96946198f092c029fd6880e5e6c6ec
SHA1 9aee90b66b8f9656063f9476ff7b87d2d267dcda
SHA512 43a9fc190f4faadef37e01fa8ad320940553b287ed44a95321997a48312142f110b29c79eed7930477bfb29777a5a9913b42bf22ce6bb3e679dda5af54a125ea
SSDEEP 1536:fFj1H+dLa2mqJTVj0+bFkXfRwVSND7uEZz6YDqa9eLGRQssw2A2:Nj1edLa2XTBnbF4fRwVSxuEzT0iRQT
TLSH
T1D463659147EF4AF1A2CAF9940C6B08976FF551F42BD2229C4BD1918897B6FB010F7B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_business_and_industrial.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
Size 45KB
SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
MD5 a92a0fffc831e6c20431b070a7d16d5a
SHA1 da5bbe65f10e5385cbe09db3630ae636413b4e39
SHA512 31a8602e1972900268651cd074950d16ad989b1f15ff3ebbd8e21e0311a619eef4d7d15cdb029ea8b22cf3b8759fa95b3067b4faaadcb90456944dbc3c9806a9
SSDEEP 768:inUsWHNnOAvkuPPu2fYAE/ecNjBr0QOdt+RbK7QvsFe1AIKlREQTLGNfGfWeISqK:inUsWHNnrvkuPPuYLE/ecNjBr0QOdt+Q
TLSH
T1E52384A143EF4AF1A2DAF9A408EB08875FF551F52BC3319C0BD1964857B9BB410F3A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_computers_and_electronics.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
Size 45KB
SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
MD5 6ccd943214682ac8c4ec08b7ec6dbcbd
SHA1 18417647f7c76581d79b537a70bf64f614f60fa2
SHA512 e57573d6f494df8aa7e8e6a20427a18f6868e19dc853b441b8506998158b23c7a4393b682c83b3513aae5075a21148dd8ca854a11dabcea6a0a0db8f2e6828b8
SSDEEP 768:6aSj2tjV9bSvFczWWepPoiKLYvmt2fNjods5cstLpIscqqWPCFOAfw3yON8afnXE:6aSj2tjV9bSvFSWR6BImt2fNzcQIcRPs
TLSH
T16F23869557EF0AF2A2CAF9940CAB08979FF552F42FD3614C0BD195485BB9EF010F2A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_finance.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_finance.json
Size 33KB
SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
MD5 e95c2d2fc654b87e77b0a8a37aaa7fcf
SHA1 b4b00c9554839cab6a50a7ed8cd43d21fdaf35dc
SHA512 9696998a8d0e3a85982016ff0a22bb8ae1790410f1f6198bb379c0a192579f24c75c25c7648b76b00d25a32ac204178acaccd744ee78846dfc62ebf70bf7b93a
SSDEEP 768:cieaDKbQMMvEfD4vFMLKqPYE1dRDz7teb0kz3lY80:cieqKbQMMvEfD4vFeKqPYE1dpzPkblYp
TLSH
T1B6F261A543EF09F2A6CAFD9508EB08D76FB512F52BD3219C0BD1518857B8FB504F2A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_food_and_drink.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
Size 67KB
SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
MD5 70ba02dedd216430894d29940fc627c2
SHA1 f0c9aa816c6b0e171525a984fd844d3a8cabd505
SHA512 3ae60d0bf3c45d28e340d97106790787be2cc80ba579d313b5414084664b86e89879391c99e94b6e33bdc5508ea42a9fd34f48ca9b1e7adfa7b6dd22c783c263
SSDEEP 1536:bOuA7D7UEWOGEsffwBSqW1cWINNwAnnu4p2sUSDTA1hma+36t1n:vuDoEWbEJoDCNNwG1p2fSDTAne6tx
TLSH
T19D63659143EF4AB1A6CEF9940CAB0C976FF551F82BC2628D4B9191589779FB010F3B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_games.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_games.json
Size 44KB
SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
MD5 4182a69a05463f9c388527a7db4201de
SHA1 5a0044aed787086c0b79ff0f51368d78c36f76bc
SHA512 40023c9f89e0357fae26c33a023609de96b2a0b439318ef944d3d5b335b0877509f90505d119154eaa81e1097ecfb5aa44dd8bb595497cdecfc3ee711a1fe1d5
SSDEEP 768:aPlZWWBHj0sWoa2JBAyMemRwoF/GgQKP2Sgj2KxpxrXDUIsJBaU5Qk0NbrkOVlxh:MnWWBD0sWN2JBqemRwoF/DQKP2Sgj2KP
TLSH
T1392343A263EF8AF292CAF5D508B708935F35A2F51FC3218C07D1554C63BDEB504DAA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_health.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_health.json
Size 33KB
SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
MD5 11711337d2acc6c6a10e2fb79ac90187
SHA1 5583047c473c8045324519a4a432d06643de055d
SHA512 c2301ed72f623b22f05333c5ecc5ebf55d8a2d9593167cc453a66d8f42c05ff7c11e2709b6298912038a8ea6175f050bbc6d1fc4381f385f7ad7a952ad1e856b
SSDEEP 768:p52SrX0UfFfol2F0Qmfw28ZVV5d1kVWWuFzVS7UpLNNpfmNzp:pYSrkUfFfol2F/uw28DV5d1kV/pUttk9
TLSH
T170F273A543EF4AF2A2DAFD9808EB0C935FB512F51BD3219C0BC1558897B9FB010F6906
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_hobbies_and_leisure.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
Size 67KB
SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
MD5 bb45971231bd3501aba1cd07715e4c95
SHA1 ea5bfd43d60a3d30cda1a31a3a5eb8ea0afa142a
SHA512 74767b1badbd32cacd3f996b8172df9c43656b11fea99f5a51fff38c6c6e2120fae8bdd0dd885234a3f173334054f580164fdf8860c27cbcf5fb29c5bcdc060d
SSDEEP 1536:ex2J49OJ2vESNyvm4q6FZ/jrmEn8eUvQPHqbsrEyZ0FavsBiwrq:ekJ4sJ28SNOm4qK7rx8pvQPHe0E6
TLSH
T12E63429492EF0BB1B6DEF9A40CA708976EF551F92BD1328C1F819158D7B9BB010F3909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_home_and_garden.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
Size 33KB
SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
MD5 250acc54f92176775d6bdd8412432d9f
SHA1 a6ad9ad7519e5c299d4b4ba458742b1b4d64cb65
SHA512 a52c81062f02c15701f13595f4476f0a07735034fcf177b1a65b001394a816020ee791fed5afae81d51de27630b34a85efa717fe80da733556fdda8739030f49
SSDEEP 768:OQUamVglKm5c3LOBRdNbtgdjdKbnWX1FV61u/oj/2WWa81l:OQUHWln5c38RdNbtgdjdKbnWX1F01u/v
TLSH
T1F0F262A553EF4DF292CEF99508AB08C7AFB512F52BC3315C0BD1959C5778AB014F2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_internet_and_telecom.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
Size 67KB
SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
MD5 36689de6804ca5af92224681ee9ea137
SHA1 729d590068e9c891939fc17921930630cd4938dd
SHA512 1c4f4aa02a65a9bbdf83dc5321c24cbe49f57108881616b993e274f5705f0466be2dd3389055a725b79f3317c98bdf9f8d47f86d62ebd151e4c57cc4dca2487c
SSDEEP 1536:inLl7pDjTv1exoCMGh8Mnv8a0Z3b73AvW/BYCxnhFGLaJbPESGccXIdJ4XG4AL25:inL5NTv19TGh8MnveZ3bcvY5fFGL0ESS
TLSH
T1D563989543EF4AF1A2CBFA940C6B08976FF551F42BD2228D0BD1955897B9FB010F2B09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_jobs_and_education.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
Size 33KB
SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
MD5 2d69892acde24ad6383082243efa3d37
SHA1 d8edc1c15739e34232012bb255872991edb72bc7
SHA512 da391152e1fbce1f03607b486c5dea9a298a438e58e440ebb7b871bd5c62d7339b540eed115b4001b9840de1ba3898c6504872ff9094ba4d6a47455051c3f1c5
SSDEEP 768:yOloEjLuudxPXz9CIwFUwl5cw5zFpyIrf2vutr:yOloEjLuud9z9CIYd8w5zOIb2vutr
TLSH
T12EF274A543EF4AF2A2CAF99408EB08D35F7112F51BD3219C0BD1558C97BDFB514E2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_law_and_government.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
Size 68KB
SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
MD5 80c49b0f2d195f702e5707ba632ae188
SHA1 e65161da245318d1f6fdc001e8b97b4fd0bc50e7
SHA512 972e95de7fe330c61cd22111bd3785999d60e7c02140809122d696a1f1f76f2cd0d63d6d92f657cdec24366d66b681e24f2735a8aabb8bcecec43c74e23fb4f5
SSDEEP 1536:IwvZ+KSd2cFmpFGB/Sp1xAi6ZxaaF/VZhuthlV2+5pFDo/z:IOgKM2cgGB6p1xAi6ZganZ0thlR5fDw
TLSH
T1FC63639543EF4AF1A2CBF9940CAB08936FF552F52BC2228D5BD191889775FB010F7A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_online_communities.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_online_communities.json
Size 67KB
SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
MD5 37a74ab20e8447abd6ca918b6b39bb04
SHA1 b50986e6bb542f5eca8b805328be51eaa77e6c39
SHA512 49c6b96655ba0b5d08425af6815f06237089ec06926f49de1f03bc11db9e579bd125f2b6f3eaf434a2ccf10b262c42af9c35ab27683e8e9f984d5b36ec8f59fd
SSDEEP 1536:ZWJiPPEIYm4hGeujuImzVLA2Y9MMZm7nS83QFDBk2BrdICjt9EyO2B+AMwt0OwDV:FnEnThGequJtvR7S8gF1k21+C/u2c34O
TLSH
T19663769143EF4AF1A3DAF9940CAB08975EF551F92FD2228D0BD1859897B5FB010F3A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_people_and_society.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
Size 45KB
SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
MD5 b1bd26cf5575ebb7ca511a05ea13fbd2
SHA1 e83d7f64b2884ea73357b4a15d25902517e51da8
SHA512 edcede39c17b494474859bc1a9bbf18c9f6abd3f46f832086db3bb1337b01d862452d639f89f9470ca302a6fcb84a1686853ebb4b08003cb248615f0834a1e02
SSDEEP 768:7xHLNYPUAcQL9/5EGy6T21Rpuhfkqxceuj/jCPUwXF5YK4otABk3MTicb3twO:7xJYRcQL9x9y6T0RpuhVxcnj/jCPlF5U
TLSH
T1C22331A267EF8AF292CAF59508B708D39F3552F52BC3318C0BD2454C57BDEB504DAA09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_pets_and_animals.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
Size 44KB
SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
MD5 5b26aca80818dd92509f6a9013c4c662
SHA1 31e322209ba7cc1abd55bbb72a3c15bc2e4a895f
SHA512 29038f9f3b9b12259fb42daa93cdefabb9fb32a10f0d20f384a72fe97214eff1864b7fa2674c37224b71309d7d9cea4e36abd24a45a0e65f0c61dc5ca161ec7c
SSDEEP 768:FLu2LJObDMMGynnlGGRgS3c95S6uqs8hbiiAUU+GFs8XAxr18+to4rN7:FLu2LgfMMGynlGGWS3S5S6uqs8diBUUE
TLSH
T1BB235192A3EF8AB292CAF5D908A70CD35F3592F51BC3308C07D2554C57BDEB504DAA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_real_estate.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_real_estate.json
Size 67KB
SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
MD5 9899942e9cd28bcb9bf5074800eae2d0
SHA1 15e5071e5ed58001011652befc224aed06ee068f
SHA512 9f7a5fbe6d46c694e8bc9b50e7843e9747ea3229cf4b00b8e95f1a5467bd095d166cbd523b3d9315c62e9603d990b8e56a018ba4a11d30ad607f5281cc42b4cd
SSDEEP 1536:1HbzBc8oBPUqosGZzqWnp2HGmj2oEVK2rQoe4my08:pX3oBPlGdqWnp2H1j2okJU8
TLSH
T13F63859153EF4AF1A2CAF9940CAB08936FF551F92BD2328C1B9585989775FB010F3E09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_reference.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_reference.json
Size 56KB
SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
MD5 567eaa19be0963b28b000826e8dd6c77
SHA1 7e4524c36113bbbafee34e38367b919964649583
SHA512 6766919b06ca209eaed86f99bee20c6dad9cc36520fc84e1c251a668bcfe0afcf720ea6c658268dc3bbaaf602bfdf61eb237c68e08d5252ea6e5d1d2a373b9fe
SSDEEP 1536:CoUbONFuEIHoh/SzhzCb8RxLnIp4umt1iBfOowttMP5cRdH6Q1:CoUGFuEpSz9CWIpN21ihOhtMP6R7
TLSH
T17943539153EF4AF262CEF9A408EB08975FF551F52BD3328D0BD1815857B9EB110F2A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_science.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_science.json
Size 56KB
SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
MD5 7a8fd079bb1aeb4710a285ec909c62b9
SHA1 8429335e5866c7c21d752a11f57f76399e5634b6
SHA512 8fc1546e509b5386c9e1088e0e3a1b81f288ef67f1989f3e83888057e23769907a2b184d624a4e4c44fcd5b88d719bd4cca94dfb33798804a721b8be022ec0c6
SSDEEP 1536:LjYZHEpB1Uj1/uC+Kgaj+ZSftvIu46MOYwZ6pFIIP0:LMZSzUj1WC+BajtftvIu4Ep
TLSH
T12F43549153EF4AF1A2DBF9A808AB08935FF551F42BD3718D0BD195489779EB010F3A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_shopping.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_shopping.json
Size 67KB
SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
MD5 97d4a0fd003e123df601b5fd205e97f8
SHA1 a802a515d04442b6bde60614e3d515d2983d4c00
SHA512 111e8a96bc8e07be2d1480a820fc30797d861a48d80622425af00b009512aacb30a2df9052c53bfbf4ee0800b6e6f5b56daa93d33f30fecb52e2f3850dfa9130
SSDEEP 1536:1vkMySD619DD3TjGVEcPtlGjsVLGNy9gvRa6a6ElLf2M3yi70rB:9WG6LDDjjQE6tlGBvRa6hxiorB
TLSH
T1F963845593EF0AB1B6CEF9A40CA708936EF551F92BD2328D1F819098D779BB010F3909
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_sports.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_sports.json
Size 56KB
SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
MD5 ce4e75385300f9c03fdd52420e0f822f
SHA1 85c34648c253e4c88161d09dd1e25439b763628c
SHA512 d119dc4706bbf3b6369fe72553cfacf1c9b2688e0188a7524b56d3e2ac85582a18bbee66d5594e0fb40767432646c23bf3e282090bd9b4c29f989a374aeae61f
SSDEEP 1536:YwvnrcvFvtCkX5EAPqPaFg3GlEIwULrIHqBuH5qM:YwfAvgIrqPaq3GlE4Ej
TLSH
T1AA43649157EF4AF166DAF9A408AB08936FF551F92BC3328C0BD1914857B9FB110F390A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb_model_build_attachment_travel.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\nb_model_build_attachment_travel.json
Size 67KB
SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
MD5 48139e5ba1c595568f59fe880d6e4e83
SHA1 5e9ea36b9bb109b1ecfc41356cd5c8c9398d4a78
SHA512 57e826f0e1d9b12d11b05d47e2f5ae4f5787537862f26e039918cb14faff4bc854298c0b7de3023e371756a331c0f3ee1aa7cebbbf94ec70cdfc29e00a900ed1
SSDEEP 1536:FNDkURt4oUTXolLQth8P2GHmB8+JEzoKGOcFhgywm3xXfKTvGHOym621Hp7JgET0:F/Rt4okQKoaaG7hPhhXCTvG4COq
TLSH
T1E363759143EF4AF1A2CAFA980CAB08935FF551F52FD2328D4BD5514897B9FB010F6A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recipe_attachment.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\personality-provider\recipe_attachment.json
Size 1KB
SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
MD5 be3d0f91b7957bbbf8a20859fd32d417
SHA1 fbc0380fe1928d6d0c8ab8b0a793a2bba0722d10
SHA512 8da24afcf587fbd4f945201702168e7cfc12434440200d00f09ddcd1d1d358a5e01065ac2a411fdf96a530e94db3697e3530578b392873cf874476b5e65d774a
TLSH
T16D41F63DB421186302E6676236DF42C4233402BE9EC17758FB88D49A5EFD5792236B2F
MD5 SHA1 SHA512 TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 735b556e39b4ecfd4109214a4e6e05164beb5df32f3929e7fe37569e07ae251a
MD5 15394c57cb095c6f90a04c4ac439614b
SHA1 6668abba69d9cbb8a9674bc4af3187565e8af3a5
SHA512 66c45e37dd1897bfc1ff2e3061087e883b027e44604b9801a076f3513032ec72bac24d1981446eb10b786ef15e30697860c402883d44ff9df300e72d280d8d08
SSDEEP 1536:jTrliJeHvDGPPVpz3dpc6gSMlGZxNB7RZpIVuAyLhLyM0gLT1dO0BRkaSkEGCg2n:j3lqPVpzrvbNB7dPxfX1dO8kbkOlpMxA
TLSH
T13BA3BFF6DBA28939A5FFD4196AC2C43EFD262404B3A73009C963735062C6FB47779648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

remote-settings-startup-bundle-

Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
Size 563KB
SHA256 c1d271bddcf16d8b3d6d5b0bb05141c8a3de5f5262ce4ebbccaaa77ef9ead442
MD5 a215c4db0f24bd77294945db7ad39038
SHA1 74eff62b3da72b6259fd88ac6b6db90730322c79
SHA512 ae67ba0f5770b650836f79db7dc2f7dd2c92e5430892fe8ca59f84a2721b0731981294684ead856395146ca3bef0e66d019031b7dff26d594d70892361a7da7c
SSDEEP 12288:YEy99qE5MPg7jHTwgLYPEOvpYItgN1X3Qh/IscPahLGbYIaW4neIpuy:TyCE/7YgLYPJvpYOg/3KgvyhiqjPP
TLSH
T1EBC4F2F5F75078E3A7BE020B9D867FAD1B565622C38EE0CC447B27C2459772AAFA5100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 7KB
SHA256 27a6c04cfe9220c92e400304e293a2671d54df32c679eee87bc16f24bc06cfe4
MD5 b19b2e8ee4973f88e3e08e8193e68506
SHA1 d35a6580b4b6f05722725195e9118b6fca3489f1
SHA512 21fd236bd45c62f8147733a31914a8c0a2b2573243151f99be08f2566f5650cc531ca606ea0b8a4d11ef7f4ee1c699c1582c2c1a7c5f884778d594a839fdd683
SSDEEP 48:b2myJdK7hJ5UgdwNzzg2mjJdK7hJ/6Bdwrzg2mJJdK7hJ/adw5zBK2m9JdK7hJpm:bEm7jMglm7j/Pg3m7j/VkLm7jUpwdW
TLSH
T193F11D401BF70952F2F34A327A31B753A733FD019B0A461ED28192490A73760E56EFA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 7KB
SHA256 61ff00fc9b97d2a65ed56c1468a7ce6cadc7fd057c06d2ea9cbea0fea4c6b46e
MD5 2a87dd9482a748ef11079b9da21b4558
SHA1 6d327630b067f645a0e6ad0fe8b360bfd0fce7cc
SHA512 396f0b7eadbcf4972d0e6a3337b50ededef4d90a3d35c64c1c2a6addc2d58821c884b93405858d9b09b090138642c63050ff93ce28b1d7166ab03590cb14f201
SSDEEP 48:wyJdK7hJ5UgdwNzz9jJdK7hJ/6Bdwrz9JJdK7hJ/adw5zBv9JdK7hJpLwDpYiMon:xm7jMJm7j/Pjm7j/Vbm7jUpwdW
TLSH
T16BF11D411BF70952F2F34A32BA31BB53A733FD019B0A461ED28192490A73760D56EFA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 7KB
SHA256 fcc4c5db9c4b5ac2959ded49cb03f9dd9b4e04c5c005aa3e9063d49c8fb4de26
MD5 c680934497eb857ed30d528086a74aa1
SHA1 3111ea04932b0042c89a382994c7822fd9723fca
SHA512 aee772a506f8e97e22bce5c3e6d3bc647bfc85c2e2e3c6cbc8bb3c1a73ac404de179ab6d3f69c9d110bec7bc02add26eb676a0eddd070192f3754bf733095ad6
SSDEEP 48:byJdK7hJ5UgdwNzzCjJdK7hJ/6BdwrzCJJdK7hJ/adw5zB89JdK7hJpLwDpYiMon:Wm7jMKm7j/Pwm7j/Vgm7jUpwdW
TLSH
T155F11D401BF70952F2F34A327A31B753A733FD019B0A461ED28192490A73B60D56EFA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\AlternateServices.bin
Size 8KB
SHA256 f064391dc5742cd2c40b9ad5c1d83667319174447ad487574b78ef2809bc6125
MD5 4b681cbde6978143c1c13bbd980e014b
SHA1 e82604b78e3b0945767464ffe8f79ee70ca5f78d
SHA512 73d7c647af6b8d691807417f1a968f0bce5b16c9cc87f325f3cf485bed9e427a5cd86568ce2185f7704aac5b9c924c4b71d98f1875d2f29975d29fa840059118
SSDEEP 24:juhMZf2918w49xhet1S9BNetY9Vv/ets9lXet+9Bbe:JsWwy3et1A7etSB/etexetE9e
TLSH
T1060261F72F71AA72F0528FB09098749C9C330729593CDA84C604D0F706D9AA9913EBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\AlternateServices.bin
Size 11KB
SHA256 055a96fffc4ea70e57a6a6e0f340fa8c9ea38ce6d4a7510cfbb19e2239f743df
MD5 e431cc5ba787cf813b9a56415c42db92
SHA1 f2800092672a6735c8bb45e9306df261bd6bdb85
SHA512 f453b4703bd219518e54cc8722cdec4114b3a773e272b46abfebcacbd710f1d1db0ca69df334d3f2a55a14dc0d215f3f707b022e8b1f86549f5125fb69ff8e35
SSDEEP 24:gDuhMZy9124O9xv379BbJn9Vv5N9lx3t9BblNWN9VxWAWQ+lz:3g4URpFJ9B5Hf3n9lNM/pWQ4
TLSH
T1833210F72F726672F0528FB08098749C9C33172D593CE684CB48D0E746C5A99913EBA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\addonStartup.json.lz4
Size 4KB
SHA256 40513e5d0b63f55b4c1b3a1910b6ec63c210a82d0d25bbcfdb8c1f42489eada8
MD5 1e152b57836b3b6e411745e1804e5ff1
SHA1 5fddeb5b9ad9febe3c240309547412f5f46a3bd8
SHA512 871b6c5491d0541563049e1339f30e07e0e5f61a12b7bbed6d7ac9d01b5f30e11645e1086b54f612b1941e2e69a30378a544fe398ab04fb7cd23af66cc3c101d
SSDEEP 96:NaMpq4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:N/p152xxhD8rGvm6ApwnHUuhN
TLSH
T1CBA18EBAD541EFA1FE32C04348D53FB2E695AB7424A9C4D0F1AEB1294C34E735700340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bookmarks-2026-08-16_10_A4vq0gKF8g55Ccmjhsd7l0v-KXZpX-0FZCd5byZAvbo=.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\bookmarkbackups\bookmarks-2026-08-16_10_A4vq0gKF8g55Ccmjhsd7l0v-KXZpX-0FZCd5byZAvbo=.jsonlz4
Size 857B
SHA256 436729814766304ac7e2c0d05a29312906323cf0f4ed884546224d3c3ab3bfb6
MD5 8a6eca96e023470585cc7079de285399
SHA1 c13fec76e86aef320dc93e0607abe65e963b60ed
SHA512 0a4e83f6ab12b0e3ff34cf51044ca814f91e9f74b1cffcf3b95b0489510c41ddc085b625e39c3432cbd1308b395a0d4091c392be1e54f2e91d2b58d1ab74b2ef
TLSH
T1CD11865CE2F304D04AD580BB10016A99B9A73E07DED948ECFFCD48A4A0A8A9493C77CD
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\db\data.safe.tmp
Size 141KB
SHA256 b5a50a7658143f35cde07b7794eaa3cc60cd498763265e9ed06ca5d946b79477
MD5 eccac9f06c180dfe5cd8816a9eef9d08
SHA1 b7475f21af4491e2d8dabcf3e624a5a6fbfbeac3
SHA512 67038c8dd1fa47764549614aae259c687a613783b1c8bef360bdb40f6ebc72000ee6ca6704d8d92ee5984110d7b9adc2165294564c2a7c2aa9d6a68e64bbf454
SSDEEP 3072:Bb98icEEfuuH1EZ2zuDnA+75s4SrNXBN8aNxvMJ9A09vftW:BbaicEEfuuH1EZ2zuDnA+75s4SrNXBNx
TLSH
T126E3D1D4DB17407BEC2485BFB495573C2735F4644A599B0B2AAC04722DCB3BF2D0AB2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 898bc162105455ee421bfc3b642b3be200e21a945ec3937909e17e02ce172435
MD5 805a9c75d75adfb9f11526146d8f4beb
SHA1 4f5c76ad7003ca91b5167fc80f51278027d447dc
SHA512 334a27ac95c31721b12f6b9f642ae7e2257e345e9f71e1aae95452662909178103214a83b4cab6e8595e4ece6a68e37a5c594f141050882b4a0e8c017c6b55a0
SSDEEP 192:tY4IGh1d66JozGzgCl6mc0ddOv5zboYzZCWyj1O+:tY4IGfd66JozGzgC1jUboYzZCWyjZ
TLSH
T12FE11068EA28867FC405427BCDA52F410F3A398B984E3F1935DC651C2C572CE768E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 e1fc9556b12cdd0b5d1de06beb63788bc769eb90b6ffcd2e819b9c01a9ca0f40
MD5 cd2616e9234638d417e6795101c497e2
SHA1 80fc87aa9abbaa6598519dbe8044d3dae0e83c02
SHA512 681c677b3fa66348ca4b771e51260063b3431eae4a58bc5945a1af294c30b56e691386a08c72dae7454f73213bf4612747973bc642ca8a91318e1735948253b3
SSDEEP 192:DOv5zboPP5CWyj1O2Y4IGh1d66JozGzgCl6mc0dz:Mbon5CWyjXY4IGfd66JozGzgC1jd
TLSH
T1D5E11068EA28863FC405027BCDA12B514F3A398B984E3F1935DC651C2C572DE7A8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\db\data.safe.tmp
Size 173KB
SHA256 4305a4e44a550927e4eb37c1667222b183091326a8724d644feaaf31343ecf61
MD5 0c959c08c4d00f3b425f92a8ebd2b88c
SHA1 5f295c3919cde0e29f248a70f98968861ceb66bc
SHA512 6556224015924b5b1aa8b5fb40f069e3db3e158e1d4e2be8cda418d7a02dc966a02aeae71a60204a93c413c1bfbe48c986939f73a9a90aa06707be9fd502b9df
SSDEEP 3072:3KbFRND3C8xOjYZ75YPQlQ5L5Nc+6o+AV/GM4f9D6U8+vZtu4:3KhRND3C8xOjYZ75YPQlQ5L5Nc+6o+Aw
TLSH
T16D049FD4DB17407BFC2485BF7495673C2635F4644A599B0B2AAC04722DCB3BF2D0AB2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 d487ba688aa7b063bd72a117a53bfb7f92afd31bc857d560d78538183924954d
MD5 efa0e4d6c091ee5b4f374d8d851d40f7
SHA1 59d06dfe73a999a3622570d59a94860d47367045
SHA512 cc6a1909fbc8000d19550369f937388dd00c2e1bdcdbae693d6307acfca014b382b7be1336a5c1467e4f9f001ab364a851eee8eca758f79b0f8ccd8ebc968358
SSDEEP 192:COv5zboPPPCWyj1O2Y4IGh1d66JozGzgCl6mc0d:hbonPCWyjXY4IGfd66JozGzgC1j
TLSH
T177E120A8EA28863FC405027BCDA12B514F3A398B984E3F1935DC651C2C572DE768E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 4ef0314765ef31e8028362d474ab850837aa977729bbb9d03bd9eb27876a7af4
MD5 1834fdf3a46cb4f00e7895ac66136fbd
SHA1 815fd15d98b815a457cf29238a3b938a9809a3a4
SHA512 7428ceeeb4f0b38402e26f3374b518e17c9cec78eee24b2885312d71b5fb4d02cb5369447e940869e9e49c4c1e3d40a4569be297ad9799fe084c6fc258d52850
SSDEEP 192:KY4IGh1d66JozGzgCl6mc0dxOv5zbowMCWyj1O+:KY4IGfd66JozGzgC1jsbowMCWyjZ
TLSH
T12FD12068EA28863FC405423BCDA52F410F763987984E7F1935DD65082C5B2DE768E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\db\data.safe.tmp
Size 173KB
SHA256 b7314487dd1adea97ec3111dfd235d4b5b811271938b61fc5eb2720f4b7c3d52
MD5 1d779be1e5fd3bc84f359ecc633d880d
SHA1 5daeb101da14fd34eb1f714fbb568a81d78a051b
SHA512 199284b48b42d03d6100dcc8c5817c3b3af408d82ccd93349645cf5758aa674e21881800af8c4d62c6ee8e4724fa934ebd94f72d9243f649e34dbdbb1050da83
SSDEEP 3072:UKbFRND3C8xOjYZ75YPQlQ5L5Nc+6o+/V/GM4f9D6U8+vZtuV:UKhRND3C8xOjYZ75YPQlQ5L5Nc+6o+/d
TLSH
T10A049FD4DB17407BFC2485BF7495673C2635F4644A599B0B2AAC04722DCB3BF2D0AB2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\db\data.safe.tmp
Size 141KB
SHA256 5cee537a80738db3ff87b126463640fa9d4cdf06f8ccc3c92f19b21fde7f4f4c
MD5 8466120e63e3b83481a268c7ce8624df
SHA1 907cd3cc77152b38d8376eae84def76bcfd43690
SHA512 34e66eca87d54fa0b32d4cf7280686103384477c8cd0b108d485e88e4b5c7aff9c308d0153a8e1179f8e36806646e9eaa95e819dc5c75201b58d30b7359cd192
SSDEEP 3072:ob98icEEfuuH1EZ2zuDnA+75s4SrNXBN8aNxvMJ9A09vftN:obaicEEfuuH1EZ2zuDnA+75s4SrNXBN0
TLSH
T1C2E3D1D4DB17407BEC2485BFB495573C2735F4644A599B0B2AAC04722DCB3BF2D0AB2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\db\data.safe.tmp
Size 141KB
SHA256 eace1537dcbbf70a2a364e16e5c9885f7766b529d96d0f2c3bf847da6548acb7
MD5 798f001be0f09b5fc3374e39b70add30
SHA1 2eaf14c5a0e581a00d580f28d7a245f182c10d82
SHA512 ac3c100248ec7193b774685b228a2a412fdc241100842b88023d44ad61e6f1c544a846f575946026b4d39a6c3ef80cd7d9a589cc75519988fa5fefad67f24cf7
SSDEEP 3072:Pb98icEEfuuH1EZ2zuDnA+75s4SrNXBN8aNxvMJ9A09vftg:PbaicEEfuuH1EZ2zuDnA+75s4SrNXBN5
TLSH
T1F8E3D1D4DB17407BEC2485BFB495573C2735F4644A599B0B2AAC04722DCB3BF2D0AB2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\events\events
Size 1KB
SHA256 cfd5677cc857b3f8226c7f06ea6399d16c668d666830373afbc0b434a2a15fa6
MD5 0d9e6e399826d89b29fa97e972632125
SHA1 84bd21a41cf113abc0c36d7deb60f1416bf47d1b
SHA512 17b3eaf26bdbbe71c27b440cc647e01e89d4f137081bd4024bb2cbe0e6f31030768f03926cfb01b374a5dffaeffa1dd732b1f9cdb3056a3df36e499f29fcab25
TLSH
T107213ADC3FF94E7A58CBE25C7481028E57668B4F44471E474E02EE8DCE96ADD316A838
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\events\events
Size 5KB
SHA256 e11e59bd7cf62a0bf77665768223059ed8bc2289f755892f97277e27d8b7673b
MD5 af682287fa45738fed65b375d21972a9
SHA1 6796b4e9eb35a9316da9966748cbe46714531bb2
SHA512 9770af25abf5bbe1a722316ba58ebf7e2013dd1a877c7f993692d71e9fcf54775572bcff6e7ef6607e94810b49089acfc1c570cacdad8ec7afe2f030526859f3
SSDEEP 96:HKdfdsxN7i8YLEkYW4fE8dfLEF3d2YIYD9CAxzW:HsVsnGXEaaE2fLEFNG0zW
TLSH
T135B1145D7FBC0C7E15DBD34CB881038D87ED470A84871A878D8BEE498D89E9A315E539
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pageload

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\events\pageload
Size 5KB
SHA256 59da3f4e9ef8923894bb4cf8c7f622ac4d78e4d0d13f3e72c4dc901a5e57070b
MD5 bc50721043bdcec759a40df4f75bb6e7
SHA1 e10ff2714140f75c511e7300bace14d66c2167ea
SHA512 abf874476494030b520d13921d9d397754ed6e2f4a8fcfc06131e6475d2fa79c4e7bc48f382da8d8385ca1b6dbf1fb6313d91136096fdedbfb188bb336fe8b7c
SSDEEP 96:+rddYEvxBrNynEahgopt95EvTCif7elxdBe/E0XlnWXqmOx7ADsM:+/VYBnEtZ7g
TLSH
T1E8C19E1E6E52CD7DABEB907C3285C7DF6B4A538722C6AF57A870DE2CC5C83492007265
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15981936-3aa3-4766-aad1-64ad51f2720a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\15981936-3aa3-4766-aad1-64ad51f2720a
Size 886B
SHA256 a79693e0d5edd277432a5f028c618780d3ef8444ce0646d88685f95cdc39b5fc
MD5 a6f3f70b1b20fe0dbbbbde1958d22724
SHA1 ffc463daa4e3938dbe723f5af54e134bd5ca428f
SHA512 58761b5ae3ea9b45db3a64d526a37d98b97a5dae1080bd5da1107fb2e527bdf2d977e19eb665e20bf722ee55ccb076f374cc08ebcd3a3210cb06e260d1a7596a
TLSH
T1B1112395C930B9B3CDB9D247DA90B7638EF4723380CA49187E915B180DBE61E635730B
MD5 SHA1 SHA512 TLSH

Submit Download

18e3e86b-c4cb-4a45-9cff-8e58ea892ddc

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\18e3e86b-c4cb-4a45-9cff-8e58ea892ddc
Size 235B
SHA256 85397c1e6836ff2b89c7187501d5b93d5dad4fefe093c09da8b60e37996f94c2
MD5 8b9aaafd4136755f7c48242112f56fa1
SHA1 8697f88ade90aba67fc2b6961b86e91f87d835b9
SHA512 81ecf19cc04722a5ae6d90e5248c97e66687bcfb0961f8dc3cea320b386741a4862ae7fb28b53a567dd980c847dda4f9a6b023bd0d56973f8f0e19696854a85a
TLSH
T1D2D0978024A8AF5C08209F23B0A138D230C54C332474A81085B258789AB89C88261806
MD5 SHA1 SHA512 TLSH

Submit Download

44e56c25-9894-4b35-aec1-91ebbe83f4c4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\44e56c25-9894-4b35-aec1-91ebbe83f4c4
Size 2KB
SHA256 05f50c00e34ef8ef907e83840e90e79aba23e1c282f263c3d23dc79e8fe9e977
MD5 65046adc7d10b996faa05f78bf59071f
SHA1 da0b4b8d69f06138474302f8e8e0b52f0c7b51ae
SHA512 26809b698fae9e9d510fca9e800c04cc97b48c1eea6cbf6e9573030ae99b0b8a1439d22c31373d85a7c41a21a2aac5e9a29c0c9fa5b2ca100c2ac926db3d0590
TLSH
T12B41345C75784DB68D9BF19DD981375D87A58A0320C228432D53DF0C8C9965D336A53B
MD5 SHA1 SHA512 TLSH

Submit Download

8570611e-a519-4420-af3f-e89b34598593

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\8570611e-a519-4420-af3f-e89b34598593
Size 235B
SHA256 1e5b386bb9252335e539b4113f0d8e3144ee946897aca8873cc587385fb34aeb
MD5 1c5cd275c57b1e1e1a93ea74e20dd7ce
SHA1 7eba5b04f58efbeb2091654e8f6f7d44ef46f2fd
SHA512 d5d7b1f9e051defbf928694cfce03ad97915fcba1ebdda50e57933613ae37a975a2db20556b05e1a7c2a05d53b8f37b17537b61abbcbb72d0c75bd941c0852f5
TLSH
T149D097C46488237C08041F02B0F06CC334488C3710BA6860C5A111B8A9BEDC99292817
MD5 SHA1 SHA512 TLSH

Submit Download

916a8253-0dfa-4e3b-b622-cb7ac0f07dd1

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\916a8253-0dfa-4e3b-b622-cb7ac0f07dd1
Size 883B
SHA256 9924d8cf01e2234a0dc19615ba13014591e07d53c48df24f1de6b028f49ccf0b
MD5 7cb52c8ea6245d42cf3c594409a6b847
SHA1 1fd5ff462445ca9321d79447ef8a34c94ca0a634
SHA512 7c65bb814029dc9ed90b0c863b880ce4ec34a4cc07c255f42cc74607d0272095ca891439dea29bf13ec7e899de18474d3a66e564400330423cade9d82830f3b3
TLSH
T133112381E530F9B3CD7A820BCA4177528FF9652380C695183EA15E180CBE71EA35634B
MD5 SHA1 SHA512 TLSH

Submit Download

98d28534-240a-4579-b680-bed37a54f43a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\98d28534-240a-4579-b680-bed37a54f43a
Size 281B
SHA256 ca5999e18562d5d6c8d704ffc534fda4a34fc4aed1fe5187055de464653fea04
MD5 58c50061c735abd61f6f67e73d1849db
SHA1 f9ece5373ad443e3f5da02404385ea3e4bbdae03
SHA512 ac750d55d65126ec99b16c7643b82ea10956cbeb502ec93be7d14ad07310e717274b89e1e491f4d345184b8b8daec16e20640915d5622e862f16e1c1aa914508
TLSH
T1D3D02BA03CCC6B6E4DA84F06F4F029D734664E3264F4595895D246349AFEED8411981A
MD5 SHA1 SHA512 TLSH

Submit Download

9a61b8dd-7f67-42b8-aafe-9ed2f636fc71

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\9a61b8dd-7f67-42b8-aafe-9ed2f636fc71
Size 15KB
SHA256 a4d2fef6fb90d88e97b69ca72ecc1b1cc48966b774b95f281d90c4f3888b033c
MD5 c61634f137e3823719c961df6f7ae05d
SHA1 c60e965cc19dc0caa293a99310a27fb2c5afe9a8
SHA512 f929b9167908924c1f5cf8c31c1ff150fec1acf38b47adb2b4336db2e9eb39b087bfeeb14a404c6c2b19234d7d597768552969ba41477669956e9785efc02805
SSDEEP 192:jPSSXGszHcSQuR+w7u8i2UJ871VTwBQ06tph53x/YyS1pjbMGbGU/Sg1T72zxDxy:jPrGsDcSHR+Gu8i2+owdwpPB/s1aTzQJ
TLSH
T13472C8565820557A8651E36898FCBFC3E5F638CF4C019FCA9BE4BD086DDE06E112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aa306a3c-1c10-44a7-9252-92e587246921

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\aa306a3c-1c10-44a7-9252-92e587246921
Size 25KB
SHA256 8486b9fbedfa4f3d8179e6dbc95adcca687f3215533890d4fa6cfd3b0dc176d2
MD5 c008972f6cd961c0ce6a0e825e882de9
SHA1 6298429b25543db4ca3e8d6cdece5c9825f65409
SHA512 e10ac07ecc9b461875802a2adbe8675aa440596f308e115abab1966cda9741fbdef49af036436f7a4ab0300b43b03621ab4b3e1ead95871a6b913cf57b459a37
SSDEEP 192:6ztvLVB7obshgvEaQEopEF3KCFuhS22fp0B8dCHE8Ef6CEKnsjGcYfYoLDYeZk:ctjvJGX6CFuhS2Sp0oLf8KsIgoLDDZk
TLSH
T155C22D2E7BB54CB95FD3F29CD8C2878D43ED468B40811B832C66DE5C88DE24A726F164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf1a9e97-6d48-4839-803a-4e418281991d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\bf1a9e97-6d48-4839-803a-4e418281991d
Size 1008B
SHA256 8efb7f77580330343b71a70c516dbeb57f474db66a6133ad3af11b3c128808c0
MD5 28da3ee0ee35029521b59844a0e5bc57
SHA1 08b8aeffd9d38e0101f90e6b187888645ce53391
SHA512 46d3440b02421c5075ecc11dac05ea9d07328a0febfd83a002e2fa51f46ff7b889f19604011017327e61107f6a146972b4c46403609f7ec4bb62fdfad9412bf5
TLSH
T1A5113E80D924B4B38D7AD24BE9A037928EF9212380C65D087D901B184CEA61E776B30B
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\extension-preferences.json
Size 942B
SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
MD5 20357ec0806e9826d6daf456b6b16bd8
SHA1 7d5d7a921213989294eb5cea2ee760e562ce5293
SHA512 2333fde606ee727a6b6d9812ed40e56e5d0dba4ec35abcc11b67f8ad61d1d3d4af5db699d29b3ed6b459b9e142badae69ffbebf18974b5a1c72e45ecc8cf93cf
TLSH
T17211F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\extensions.json
Size 16KB
SHA256 79a49cb4178ec4acb2bca99c31e25bec538ea958fe67e80afc7a0789be336b56
MD5 f332531f77c5df85f5ebf26911d6081d
SHA1 bcf7e13b19a6c880f1400d88aabb1ce578015031
SHA512 8a0d8ab76b41e8c38b7a94c9ba054a0e0ea0b26a4194eafa5e980b0643f53a4d4f7d5e6f9e42e0293790fe61abc6969a6e80a654cb7dab7b3155785402a51bf5
SSDEEP 384:qkI4v3Umldvc8dhWA94z196o3tL4HzlL4PTL4HeL4HCL4HC9E4hLl:NI4PRflXV4H6Ct4p4H4E4Q4h4T
TLSH
T18272431545048EB8294FA79BAA367E01C37D473B60845C78F4DD8FC842FA5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\prefs-1.js
Size 12KB
SHA256 5a8eee5f5a780ff8a831078387d3ee3474ebf3438ca5b453ab8707624d3049fe
MD5 1f8df6223562e029dd17ed95005220ae
SHA1 4ee252b90a03cf1d829d9e5108539e9bc7ef0980
SHA512 7c08bf00a996606ffb0b77f46bf694d205312b4bfac1164514ee1adf4ea79bb22a3723a72c852ff95a483a657bfb21bb28ea308f868efbc4a05d63c95f15ffab
SSDEEP 192:xuORnf02x93ISSSLRvlWOBw887WX2DEvM:HRNRvLw8XU
TLSH
T10C42DD7C57008B3F25F2727DAC2589B059A1027B76BFBCD206BD94C2444DF6441E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\prefs-1.js
Size 8KB
SHA256 7a828bc5c23a4a74aa00cf2307ce4de920147a06a0e508bd7aa0cb79942d1ae5
MD5 40d8211b130e3d512e8f9518cfed21ca
SHA1 12114b03850ac4827783e13e04e894df8b326eb5
SHA512 b92ad8688340d7e82036480a67648b7d90002e0d3b599b340b0c8a8393b7f05c9f790e466603378d339eab42d6858b46dc6459a68031ba04afdcffa9070b56e8
SSDEEP 96:xHg5TUPDqGqnf02x9mbzSiISSlUdv9jXn3WRvogRtBw8879B8L4cnFpLGS:yuORnf02x9AISSzRvlfBw887e
TLSH
T1BF020F7C5604CB7F64B6776CAC6889715AB2023F76BF68C610B994C5050CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\prefs-1.js
Size 12KB
SHA256 26bd209053aebcc5c33c617710ee8e0907369249879046564dbedc29e4e0ddde
MD5 12f7cc84ce6d318ba5d3ff9a9f65c16f
SHA1 fa6c82d681cd67b1c077ad848d7487bd49e085b3
SHA512 122f319c9c981b2fcc5f393089aab34fba9a899537403e464dfb17b08e249a186030567f9e7990368dbe24048625b6312f86fec3140adb7cbb958f8fc662ba37
SSDEEP 96:xH75TUPDqGqnf02x9RbzSaSSlUdv9j0n3pwoDRvogRroNOBw887WHSi2DEv2m8Ll:xuORnf02x9DSSDLRvlWOBw887WX2DEvM
TLSH
T18042DD7C57008B3F25F2727DAC2589B059A1027B76BFBCD206BD94C6044DF6441E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\prefs-1.js
Size 6KB
SHA256 83fb88f69dbaa7a1829ea9663893c6735b2e0ff31121d6afc53c5e15a15632bb
MD5 e3810d3f236d03dd999544b444e929e1
SHA1 9ee19a3dab606d7ab826d6f86c4f73dcbbc2fd2d
SHA512 65f95a2bf7b466bfbf0ef994d48972b45b9c3ae49012caebf65b37c9ca2e19af6dcee43dc0242a1c8f22d9f477b40379d3c421906d30590a9b687a551e37eff9
SSDEEP 96:xHgUTUPDqGqnfL2x91zSiISSladv9jXn3H8RNBw88n8L4cnFpC:yfORnfL2x9vISSM8HBw885
TLSH
T11BE11F789508CBBF64B6776CAC6888719AB2013B77BF68D650B594C4014CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\prefs-1.js
Size 12KB
SHA256 855b2c1d534cb70d8fa6ccc20e4409a87fd1f89a2f7a69489efd5eb61cf6aa15
MD5 4aa7460ded90eddc8e8c7043a7ee98c2
SHA1 e8dc0c3ffd3acd5d2c7d66de9556e3ecdd5814af
SHA512 4cac5494354af0e163665f830eb430cbf7cfcdaaa5cf16cd75329539c787cc624550aa60f9de6fe8221d5405a00b8a7a8b658f8a35e2ddaf4565ab85bed378df
SSDEEP 192:yuORnf02x9lISSSLRvleOBw887WX2DEvM:MR/RvTw8XU
TLSH
T16742CD7C57008B3F24F2727DAC2989B059A1027B76BFBCD206BD84C6444DF6441E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\prefs.js
Size 12KB
SHA256 0e90dcadce9b9bcdec90053a704442533d6e32993fddf8eed72f522993ff621d
MD5 8ef00bfde99b950b0be863fbca2b0c99
SHA1 1632e98e6768beb4ab07b0358369c34366446185
SHA512 60b8e9486800fa2f5f863d054d40ed2f791703f7605db366718cbafba2ea6441db25493f2a6d1cd2b1246ea531eb2a79e42c050d7b3644b0aec590af1a344d79
SSDEEP 192:xuORnf02x9lISSSLRvlWOBw887WX2DEvM:HR/RvLw8XU
TLSH
T1DC42DD7C57008B3F25F2727DAC2589B059A1027B76BFBCD206BD94C2044DF6441E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\prefs.js
Size 12KB
SHA256 d10de4c6291ebce99005c56c20a61efc171f6b505053334d01a638be3aaefd91
MD5 49db41177aa7f530c4655a80798150bb
SHA1 1cb2d0678171f751abf0d218492f8a557bf8a345
SHA512 ac6f9e3db3a91ada4c1edbad64781f6cf9e70e7456ffbe205452c558fc5524a149f6c23af91a177442247a90ad2dcd9a0f6016aea1d505886c18199c5242473e
SSDEEP 192:xuORnf02x9KISSSLRvlWOBw887WX2DEvM:HR6RvLw8XU
TLSH
T13D42DD7C57008B3F25F2727DAC2589B059A1027B76BFBCD206BD94C2444DF6441E6AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\prefs.js
Size 6KB
SHA256 affb03ba8fd46bb84c943c386a54955de64edec9fe8e2a4016f12368b802dd6e
MD5 39f45f108f026008a39035024cc32f82
SHA1 ffe8fd1c8092813b45f80a578d85c0fdafbe007a
SHA512 7273876c9117660f42bed3e5b1890f8a049fbc2e2fed63a878a3b6ad2671cff33e417c826081f7fe64d23bfcff38ff2b35013068763065384514100ee03091ff
SSDEEP 96:xHgUTUPDqGqnfLLy1zSiISSladv9jhn3H8RNBw88n8L4cnFpC:yfORnfLLyvISSa8HBw885
TLSH
T1ECE110789508CBBF64B6776CAC688871AAB2013B77BF68C650B594C4015CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 cb9add4ab504662c0f68fdb50e831d4118a9b9eca3fd82ea70d80e5a90b8d6c4
MD5 a3a4bf252f9df7c7a89489095ab52b9f
SHA1 d453b3a4c80a7668e97066e0126dca504c03f284
SHA512 8f8311f55ecf19c779d14500a3cbbbda1cad862020da9f5e4527526bed0ed3829564b48a054854c32dd4ba9fab6aeb0ae54b08d8309623d36417d5b90258b40d
TLSH
T113717EF71C377DF77632C698685F0F94CB6320A0446A04E0FE9B8D3211CE6065645EAD
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 bdb9047a0ca30901acf62106113c6df58d7da8249e09c880617876d1e2f6b364
MD5 c661f892df0765e3730a19adfe10acfa
SHA1 82440d0c5e4077cecb9624c16abea4aef50ba536
SHA512 17e0261b5a20a858b9dc06a184184a55ecf8a55246de4e034eaf7665f8d80950e91e642db76e4840389c2fa9adb0fe849ac406f5919a2e6307e879d619311995
TLSH
T121716DB71C3379F67632C698685F0F948A6320A0446A08A0EE9B8D3211CE6061645EAD
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 6418fd3da523b4d50e5a5780a1c6c5c9de1501bfd50a0af03e705f3a35615686
MD5 f6ee3d6ff1c7a339b7cb6f4dc09e0de6
SHA1 a01c457a7edd9e0396894060eb3d026c84c12dc2
SHA512 5fb9b687104ae33e46c061752972db5cc17d2902e9c0ca8eff2b000800af7d9b8f7e924d661be55107d1672b6c5fb3e7923867bd8d69d2d131aef8d767631b2c
TLSH
T161716DB71C3379F67632C698685F0F948A6320A0446904E0EE9A8D3211CE6061645EA9
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 5be4894dfc821594e726f8616e5178422783cbda5e3348222033755e455aecb7
MD5 c1e1f4fbf726b8ef106fb7fd5d3e2ef9
SHA1 00d3ca0377d83955fed2cdeb26a6c07fd27275fb
SHA512 4e956e2c46659ac990d57e03d0a34c9aef566a616911332e6a6cd7f2b1e0d0a56186fc8e66f2d0563acf2e3a19dc76b0829cd84cd69a14bb6783e9cdbd2aa358
TLSH
T1EE717DF72C377DF77A32C698685F0F948A6320A044AA08E4EE9FCD3211CE6061645E9D
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 f45c51842d9ace8fde92f0798fd184ca9ea45f74d4819ced8bc6ef3d71e4bd34
MD5 cdaf0404f9f1edcb1fc9cf2dc82acf5a
SHA1 bcd05a5f9893150b0963c012f4b073c48c8f7a66
SHA512 76ed9aa6e2efa6bbebc5a585b166b555639a34e25e08d676a216f75076a6aebb779e849c12fedd2c9320aee745a51efc9d1c16dd0e04842972c01790550f9d59
TLSH
T1D3717EF71C377DF77632C698685F0F908A63206044A904E4EE9BCD3211CE6061645E9D
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 004a74bb12c2b34d815903adcf0b501fd7ec8e92ae650ffda517947bb2bc16ec
MD5 7719e49f1e96dc96c5d1dc7ace634602
SHA1 c1d2b1871227b67b5f08cbb08136cf4bbc2d1661
SHA512 e5f500797d88a307a5bc1dcd778b01092f0a8289515e3336bb2529bf3f77aad673c992b7b7cf138f1bdcd37b397ca6cee5cce76ed8fc6e07b860cba131ae0acf
TLSH
T165717EF71C377DF77632C698685F0FD48A63206044A908E0EE9BCD3211CE6061645E9D
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 74fb3a5a8ddc0c4fb1b32b82b1b4b185bc78180bdf7b3b3094702c03c8876b1f
MD5 23a639d73cff3c69a5d2063ea189bb25
SHA1 4229fffd437a9ccad0c61470e30703ea41135054
SHA512 913ab17ddcfcabe19bd34dde00db2b30a98f20edcb93a87f2cbfe312967bb64cc24a06acae6ff7ec10821c871a507d3e2cae27c81c0d9a57efc25ba152043ddd
TLSH
T104716DB71C337DF77632C698685F0F94CA6330A0446904E4FE9A8D3211CE6061645EA9
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 6fdefe64897bad437bc739e2632abe72f4b8203e1ad2ba41fba21d4bcc857d63
MD5 95b486d0529b0c620adcfdecb84518bc
SHA1 aeb84f39e35d2fcc3bd05f14facb0f24d0fb1e1b
SHA512 3077d4131daf73a537a0313e214acfbbd0730f9561bb60cc5c8a0a6d4e63f1a4f3b58950a513a7700b023ff1350c6916af64c73fde08806a9b35130d76ad5b39
TLSH
T1D8717EF71C377DF77632C698685F0F908A63206044A904E4EE9FCD3211CE6061645E9D
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 f0880a3eb7d0a89870724997aa4eccabb97c6ce0a5661088c81571097d1a4aba
MD5 6900dc4aa1ce11a89a37d08b77b43d4b
SHA1 20b76e047d8c5931d618602cb7c6dd14f28e0de1
SHA512 b5d020e44751a88b6df3726bfc309c1780dccb3b72dd79ed0a2d61cb23088a9144d9c5f0497457742489b63d326a5ceb03e0e91b8742c2ce3b9ac8c85c86bd03
TLSH
T1CF717DF72C377DF77A32C698685F0F948A6320A044AA08E4EE9B8D3211CE6061645E9D
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionstore-backups\recovery.baklz4
Size 1KB
SHA256 98a2a9160cff18966b00accf0e632d4dfec1ae4e717eb31ababba73008f3281f
MD5 a5250e38c3cb72a8ffa0d3c1768bfde3
SHA1 90125af3ed163b487d182caab899628ba71d6ff0
SHA512 d978d6c2ebb56754da130f301b903e5287eba46bb742d757e8f6db00d7ad6d7efa58f94c16fdaa24e306b143e85a17fe123618a75db0be8fb0111e1a5952c85a
TLSH
T11921C6835E7B3EF17B228265C18A9FA5DB5A302284750CF0D68E890220CF10967CF51C
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 1f73d10ff3571814cb8fd15f2617f9636f41cd5b5805b7d03b976e83124e9ec3
MD5 a8001cbedb3b913c5bd960bcf486fd51
SHA1 c4cc19944d3a0395097f7f6ac8ae44ce7df267d7
SHA512 ed4cfc0f9d2535ff5d03b4f51c0c5c740da8fcd38fcdc50bc1a858c11e4c6ead2b9b482b5d8b0f1f70e99d7a03e0503024196ef081000d194187802e03e9c38a
TLSH
T112717DF72C377DF77A32C698685F0F948A6320A044AA08E4EE9B8D3211CE6071645E9D
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 32a64a7503a1f82df53e594dfb9c9dd1dc9a744764819f455651744674f9e3df
MD5 23aa52d3d67cf937cdf1e6d36d9b6e3b
SHA1 856a05e3f7e37a06e1487842ba65a1ab5f1ea094
SHA512 28d3d04ad901c0428618ad29afe1ef61f1f598e10560e9a209eb5e0ecb548770d757b987919b27910ac17d13c8c00f0ac12fc1f882c3e644b739a2660c725b79
TLSH
T1D9716DB71C3379F67632C698685F0F94CA6330A0446A04A4EE9A8D3211DE6065645EA9
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionstore-backups\recovery.baklz4
Size 3KB
SHA256 0e607464c5d22d810177e2aa45b1de14dcdf8b96704a9a91f5a391420558e721
MD5 0821fe25361ecd604b55ca79faf88efa
SHA1 003ec8f8751e8b94dc3ac950b96a0ecb8ec7a282
SHA512 a10817e8020451067845a47483587bb8e3620de399a1163c3c2d9662ccb3dc5a6ca0e74c15894064413d64cdfc7cdc32414f6786f8b46c65e67f0a607f29242b
TLSH
T1FF717EF71C377DF77632C698685F0F948A63206044A904E0EE9B8D3211CE6161645E9D
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 aa7d5f50babe26cf703d37c9289d78212a2c23e12ce5776f84558e556ab0205f
MD5 bef85fcc693cb5b23904384c5343a8e7
SHA1 151ac80d1b5a034ee935c696f0cd154e0f0e8803
SHA512 f4dd528486030f4455badc0d5840ab947fc29a2f68c3cf811bb1416b8ec4ea4d4384dc0a40a8c702558604cb22c902f597aebb3d678e4ff77498ca4b874dcf57
TLSH
T1CF716DB71C3379F77632C699685F0F948A6320A0446908A0EE9B8D3215DE6061645EA9
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 6.5MB
SHA256 5a27989a4495eb2ecdeb5aa6190806b98bc73b4d6f8c8da6faea6227d57e9004
MD5 e01a62bf84b160b64ecf7b6fddd78a02
SHA1 1419e0044f80a66409420af783237ada751c3b9b
SHA512 265f0f38b0f4f1fa6792e83e78c04cda83da5b561121eee762abccc8939cb94f98f6df26031fcbc79bae0f436f44e429f5de7db927bff39198d67a6122f8bec2
SSDEEP 49152:ZL9LynaeUT6QC5zYY+TCJ50JyMKelJzEgy2nvaJiDMsvrxNlBO3lCrITJ4SJ/UKk:plpBUlCrOAn5Al1
TLSH
T165665CE420E29252F34144B3719A53EB11EFC00C6077CE445B9896FAA5B8CEB4E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads