Analysis

  • user interaction
    yes
  • max time kernel
    1799s
  • max time network
    1755s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    19/08/2026, 20:38

General

  • Target
    SKlauncher-3.2.18_Setup.exe
  • Size 3.6MB
  • Sample260819-zepm7sshqa
  • SHA256 5d7f6d20b4de8c600f81d64b4608bb65bccf92bfc72a727831c8785a63b68997
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops desktop.ini file(s) 3 IoCs
  • Detected potential entity reuse from brand GOOGLE. 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Checks processor information in registry 2 TTPs 64 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.18_Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.18_Setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2736
    • C:\Users\Admin\AppData\Local\Temp\is-IYDNL2OPDG.tmp\SKlauncher-3.2.18_Setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-IYDNL2OPDG.tmp\SKlauncher-3.2.18_Setup.tmp" /SL5="$701EE,2154364,841216,C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.18_Setup.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      PID:1100
      • C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe
        "C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe" -Xmx512M -jar "C:\Users\Admin\AppData\Roaming\sklauncher\SKlauncher.jar"
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Checks processor information in registry
        • Suspicious use of SetWindowsHookEx
        PID:7656
        • C:\Windows\SYSTEM32\reg.exe
          reg query "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v AppsUseLightTheme
          4⤵
            PID:9876
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe"
      1⤵
      • Suspicious use of WriteProcessMemory
      PID:3956
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe"
        2⤵
        • Drops desktop.ini file(s)
        • Detected potential entity reuse from brand GOOGLE.
        • Checks processor information in registry
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:764
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2028 -prefsLen 27099 -prefMapHandle 2032 -prefMapSize 270279 -ipcHandle 2092 -initialChannelId {91b4a119-f780-47e2-8d81-c4d29337f5e2} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
          3⤵
            PID:3640
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2480 -prefsLen 27135 -prefMapHandle 2484 -prefMapSize 270279 -ipcHandle 2492 -initialChannelId {b37eacb8-ce72-4ba3-a4e7-5d4d824b6ef1} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
            3⤵
            • Checks processor information in registry
            PID:4304
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2788 -prefsLen 27276 -prefMapHandle 1268 -prefMapSize 270279 -jsInitHandle 2884 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1264 -initialChannelId {0a1b9d82-5157-4767-adb9-2c189f1405cb} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
            3⤵
              PID:4520
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3660 -prefsLen 27276 -prefMapHandle 3664 -prefMapSize 270279 -ipcHandle 2788 -initialChannelId {7a9ef4a9-57f1-4f54-8b79-0f0f5f505b5b} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
              3⤵
                PID:3660
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4320 -prefsLen 34775 -prefMapHandle 4324 -prefMapSize 270279 -jsInitHandle 4328 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4336 -initialChannelId {a55f5c44-39f5-47d2-975e-a0470ed95779} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                3⤵
                • Checks processor information in registry
                PID:4964
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4768 -prefsLen 34931 -prefMapHandle 4748 -prefMapSize 270279 -ipcHandle 4780 -initialChannelId {2227ef53-753d-4ed7-ac48-9ca36b845e7f} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                3⤵
                • Checks processor information in registry
                PID:5140
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5144 -prefsLen 32952 -prefMapHandle 5148 -prefMapSize 270279 -jsInitHandle 5152 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5160 -initialChannelId {1f99a3ca-6354-4872-8682-6e125636bd31} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                3⤵
                • Checks processor information in registry
                PID:5884
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5168 -prefsLen 32952 -prefMapHandle 5336 -prefMapSize 270279 -jsInitHandle 5340 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5348 -initialChannelId {8f0f88fb-8264-47d0-8448-2d3d2e4e2034} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                3⤵
                • Checks processor information in registry
                PID:5900
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5544 -prefsLen 32952 -prefMapHandle 5548 -prefMapSize 270279 -jsInitHandle 5552 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2764 -initialChannelId {2095f92d-0e41-485a-b9bc-79e29a74f71d} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                3⤵
                • Checks processor information in registry
                PID:5960
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6256 -prefsLen 35432 -prefMapHandle 2888 -prefMapSize 270279 -jsInitHandle 6244 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6200 -initialChannelId {d9c8448f-8604-4f9f-8962-2e15eb127ca8} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
                3⤵
                • Checks processor information in registry
                PID:4608
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3124 -prefsLen 36758 -prefMapHandle 1240 -prefMapSize 270279 -jsInitHandle 4252 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5520 -initialChannelId {a24e199d-d0bd-4c57-9d23-8c44d336e5a5} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
                3⤵
                • Checks processor information in registry
                PID:5432
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6532 -prefsLen 36758 -prefMapHandle 6536 -prefMapSize 270279 -jsInitHandle 6540 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6520 -initialChannelId {6aeca9e6-b586-4334-b54e-d493e62f3fec} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
                3⤵
                  PID:1880
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 5624 -prefsLen 39877 -prefMapHandle 5628 -prefMapSize 270279 -ipcHandle 6540 -initialChannelId {b2dfbad4-beec-4489-8832-13d2c2a798d9} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 utility
                  3⤵
                  • Checks processor information in registry
                  PID:4120
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6864 -prefsLen 36758 -prefMapHandle 6868 -prefMapSize 270279 -jsInitHandle 6872 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5668 -initialChannelId {98abb648-b13a-4ad2-9b8b-e749dc9e19ea} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
                  3⤵
                    PID:2980
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6460 -prefsLen 36758 -prefMapHandle 6408 -prefMapSize 270279 -jsInitHandle 6424 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5460 -initialChannelId {a9d0cef8-f902-46a0-abde-7dc64c7e0dc0} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
                    3⤵
                    • Checks processor information in registry
                    PID:2508
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7184 -prefsLen 36758 -prefMapHandle 7204 -prefMapSize 270279 -jsInitHandle 7208 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5964 -initialChannelId {212a6a04-3ca6-4517-9618-70adb3706a6e} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 tab
                    3⤵
                    • Checks processor information in registry
                    PID:4852
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7376 -prefsLen 36758 -prefMapHandle 7380 -prefMapSize 270279 -jsInitHandle 7384 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5320 -initialChannelId {4f1baa65-4f7c-4dd2-9c37-2f1daac8f182} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
                    3⤵
                    • Checks processor information in registry
                    PID:2892
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7620 -prefsLen 36758 -prefMapHandle 5320 -prefMapSize 270279 -jsInitHandle 7320 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7704 -initialChannelId {0283ceaf-0685-41e5-aebe-2f04eec12ddf} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
                    3⤵
                      PID:5660
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6536 -prefsLen 36758 -prefMapHandle 7436 -prefMapSize 270279 -jsInitHandle 7512 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7504 -initialChannelId {23f21ede-2058-49a3-a8c3-8ef9717a49d2} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
                      3⤵
                      • Checks processor information in registry
                      PID:976
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7992 -prefsLen 36758 -prefMapHandle 7996 -prefMapSize 270279 -jsInitHandle 8000 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8008 -initialChannelId {286f36bb-e371-4444-92fe-b5abd8ef9b7d} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
                      3⤵
                      • Checks processor information in registry
                      PID:1048
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8380 -prefsLen 36758 -prefMapHandle 8376 -prefMapSize 270279 -jsInitHandle 8280 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8436 -initialChannelId {02446b8f-8058-461f-8aab-da1c1037b1fd} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
                      3⤵
                      • Checks processor information in registry
                      PID:3404
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8868 -prefsLen 36758 -prefMapHandle 8848 -prefMapSize 270279 -jsInitHandle 8864 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8816 -initialChannelId {81e2c035-0913-47a8-8d6f-41265a85ef53} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
                      3⤵
                      • Checks processor information in registry
                      PID:2956
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9200 -prefsLen 36758 -prefMapHandle 9204 -prefMapSize 270279 -jsInitHandle 9208 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9220 -initialChannelId {c0d06167-1c11-4876-a33b-eccb3b75858a} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 23 tab
                      3⤵
                      • Checks processor information in registry
                      PID:4848
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9060 -prefsLen 36758 -prefMapHandle 9056 -prefMapSize 270279 -jsInitHandle 9052 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9368 -initialChannelId {82e417db-aab8-4daa-b891-863327bb0d38} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 24 tab
                      3⤵
                      • Checks processor information in registry
                      PID:2052
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9480 -prefsLen 36758 -prefMapHandle 9524 -prefMapSize 270279 -jsInitHandle 9536 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9544 -initialChannelId {b087a7ba-5fdd-4f0b-b867-d051136080cf} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 25 tab
                      3⤵
                      • Checks processor information in registry
                      PID:5912
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4296 -prefsLen 36758 -prefMapHandle 4712 -prefMapSize 270279 -jsInitHandle 9572 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 9452 -initialChannelId {2edd7720-d045-4a16-a00a-fa6f8732c8aa} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 26 tab
                      3⤵
                      • Checks processor information in registry
                      PID:6416
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9444 -prefsLen 36758 -prefMapHandle 9208 -prefMapSize 270279 -jsInitHandle 9192 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 8776 -initialChannelId {63d75768-a4d1-4fd0-a071-68ece11f2a1a} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 27 tab
                      3⤵
                      • Checks processor information in registry
                      PID:6428
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10164 -prefsLen 36758 -prefMapHandle 10172 -prefMapSize 270279 -jsInitHandle 10176 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10184 -initialChannelId {e5e14d50-bb2e-4790-9db9-8f85333bea21} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 28 tab
                      3⤵
                      • Checks processor information in registry
                      PID:6436
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10320 -prefsLen 36758 -prefMapHandle 10316 -prefMapSize 270279 -jsInitHandle 10312 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10016 -initialChannelId {25558439-07bf-40b1-98ef-ec84bf228b6d} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 29 tab
                      3⤵
                      • Checks processor information in registry
                      PID:6684
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10600 -prefsLen 36758 -prefMapHandle 10320 -prefMapSize 270279 -jsInitHandle 10316 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10604 -initialChannelId {ac6b34ee-179d-44ed-9fc9-64a9871085ee} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 30 tab
                      3⤵
                      • Checks processor information in registry
                      PID:7008
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10320 -prefsLen 36758 -prefMapHandle 10316 -prefMapSize 270279 -jsInitHandle 10568 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10720 -initialChannelId {66e50062-7823-4dac-bbdf-c8636c5d9f61} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 31 tab
                      3⤵
                      • Checks processor information in registry
                      PID:7088
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 10916 -prefsLen 36758 -prefMapHandle 10960 -prefMapSize 270279 -jsInitHandle 10968 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 10976 -initialChannelId {53f000a7-f8d2-42b3-b01f-265dbc83f276} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 32 tab
                      3⤵
                      • Checks processor information in registry
                      PID:7096
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7176 -prefsLen 36758 -prefMapHandle 7388 -prefMapSize 270279 -jsInitHandle 5712 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7524 -initialChannelId {dbc310ed-67f6-4e1a-a098-fe61fa76b2be} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 33 tab
                      3⤵
                      • Checks processor information in registry
                      PID:7416
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7536 -prefsLen 36758 -prefMapHandle 10740 -prefMapSize 270279 -jsInitHandle 10876 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11260 -initialChannelId {927e02f0-948b-4693-9740-26ea60c1a9b0} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 34 tab
                      3⤵
                      • Checks processor information in registry
                      PID:7424
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11216 -prefsLen 36758 -prefMapHandle 10720 -prefMapSize 270279 -jsInitHandle 10568 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1240 -initialChannelId {ce5202b6-724b-4e37-bb65-e2a8cc14cb0e} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 35 tab
                      3⤵
                      • Checks processor information in registry
                      PID:7448
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11496 -prefsLen 36758 -prefMapHandle 11500 -prefMapSize 270279 -jsInitHandle 11504 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11512 -initialChannelId {f4d2be08-046f-46fb-af89-1f1e0801b8bb} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 36 tab
                      3⤵
                      • Checks processor information in registry
                      PID:7460
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 11544 -prefsLen 36758 -prefMapHandle 11548 -prefMapSize 270279 -jsInitHandle 11552 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 11516 -initialChannelId {7975f72e-0acd-4bfd-b179-ff7011d09621} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 37 tab
                      3⤵
                      • Checks processor information in registry
                      PID:7468
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12232 -prefsLen 36758 -prefMapHandle 12236 -prefMapSize 270279 -jsInitHandle 12240 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12248 -initialChannelId {fa6ac8e6-c00c-4de6-ba86-a0dec182ad8a} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 38 tab
                      3⤵
                        PID:7556
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7876 -prefsLen 36758 -prefMapHandle 7880 -prefMapSize 270279 -jsInitHandle 5964 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7208 -initialChannelId {238d0c1b-93a6-42d0-814c-47ae6137ceff} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 39 tab
                        3⤵
                        • Checks processor information in registry
                        PID:5852
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7408 -prefsLen 36758 -prefMapHandle 12240 -prefMapSize 270279 -jsInitHandle 12140 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12052 -initialChannelId {64aa7036-4809-4b24-8afb-6abd60aa30c4} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 40 tab
                        3⤵
                        • Checks processor information in registry
                        PID:6708
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12264 -prefsLen 36758 -prefMapHandle 7700 -prefMapSize 270279 -jsInitHandle 7752 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 12852 -initialChannelId {1adbcd6c-1f19-4d60-8e26-3ddfe9861341} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 41 tab
                        3⤵
                        • Checks processor information in registry
                        PID:6696
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 12600 -prefsLen 37240 -prefMapHandle 12500 -prefMapSize 270279 -jsInitHandle 12608 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7560 -initialChannelId {327c46d0-9f81-4440-ad61-208d9f13160a} -parentPid 764 -crashReporter "\\.\pipe\gecko-crash-server-pipe.764" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 42 tab
                        3⤵
                        • Checks processor information in registry
                        PID:8372

                  Network

                        MITRE ATT&CK Enterprise v16

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads

                        activity-stream.discovery_stream.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\activity-stream.discovery_stream.json
                        • Size 75KB
                        • SHA256 56d7ad9c814e325f3711cb1d127fa3878508bfcbc7926dcf4e944ac16141591c
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        15964

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\doomed\15964
                        • Size 9KB
                        • SHA256 84c4493a8a70185f4f0d030ebc7c4975cba8fab65aec9606f2b54cf5d7d3aff7
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        1919

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\doomed\1919
                        • Size 8KB
                        • SHA256 4574ba5b1ed24f8ac687c5559e2b6b68c6c7730fa7a1a1305635c39b28f8d7b5
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        0001618D89DA436C421AB2BC7DA943E112A00C05

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\0001618D89DA436C421AB2BC7DA943E112A00C05
                        • Size 60KB
                        • SHA256 5f29e01a113c2c715d6b08afc4567763cc4180e4e86b428c23951b64462eacbb
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        03D74D5ED346B6A425AA45C38A54C3F6BCFF5085

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\03D74D5ED346B6A425AA45C38A54C3F6BCFF5085
                        • Size 47KB
                        • SHA256 44a3976bd9161aa302d31a38973b31f3727349f20b4744e3628b96e35eb31db4
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        0D3333BF08692F30E5D6F94D8091B4919ED0F53F

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\0D3333BF08692F30E5D6F94D8091B4919ED0F53F
                        • Size 19KB
                        • SHA256 af9f2ccf4d58e87fc2b8a3d413279c61c9775147e2e8f50f5956e93f38c2aa37
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        1666D2637434141D110A8A96C9556A3C89D3263E

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\1666D2637434141D110A8A96C9556A3C89D3263E
                        • Size 31KB
                        • SHA256 911aea4d841acf1ff198771b9b18530dfa5a70c442fb68551f5ab881e4771e5c
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        196D1465CDD7618580894BAF70DE12C8C739356A

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\196D1465CDD7618580894BAF70DE12C8C739356A
                        • Size 18KB
                        • SHA256 6a925ec309505ba25f8ff57aa0109cca7b17707f6ee311376392a5c7410b2852
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        1B74BFBBDB0FC60A22AEA173DF6FA7CE4BBD8A7B

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\1B74BFBBDB0FC60A22AEA173DF6FA7CE4BBD8A7B
                        • Size 15KB
                        • SHA256 4345d4cb1d5781e5473b4339c9257d6032c8120212d5a3f7d646349b154f65d4
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        1ECF2D7E4A284534D6131075B0007585684CC30F

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\1ECF2D7E4A284534D6131075B0007585684CC30F
                        • Size 17KB
                        • SHA256 a11c77e496f5d8044234eb458a5f4fcc6f3e8c224b87cfaac6a235f2f3009767
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        22186009103EF18479185A8EC2AF9D21CB721493

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\22186009103EF18479185A8EC2AF9D21CB721493
                        • Size 438KB
                        • SHA256 25ca1d59820a93e535874c5fdd86661eaf0753105d0a145fe8ba31c522f330fc
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        243192B7AD3D5DBBCF1F6086565F0945D99E4149

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\243192B7AD3D5DBBCF1F6086565F0945D99E4149
                        • Size 68KB
                        • SHA256 f287b1dc7db3fd620a368a0a2a5cc1b590a0d09f3136231eeda1fd540c0e3f03
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        33A0E29760B9220B3B2433C2371C3B2E102E7B11

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\33A0E29760B9220B3B2433C2371C3B2E102E7B11
                        • Size 478KB
                        • SHA256 21709f3aae1cb1779afe8c5aee6540b3d9d93bc057b9a287637dab046a6dec54
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        3EDDA4487B7BB0FA688CCAD556998906EC4B89A1

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\3EDDA4487B7BB0FA688CCAD556998906EC4B89A1
                        • Size 16KB
                        • SHA256 2eeec9d7eced7b2e66c556bfa890be2bb127e95c6f1e8a88bd9180cbd8166ac4
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        42B167471A2B16C2B55F77175BA6028954D8EB62

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\42B167471A2B16C2B55F77175BA6028954D8EB62
                        • Size 245KB
                        • SHA256 e7ce0ab9c1228474c27096bc9b9617b3ba0104495338ede39b31099531c44d42
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        4A2230A9739B992DC5A8EF0BEA97863489ABF179

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\4A2230A9739B992DC5A8EF0BEA97863489ABF179
                        • Size 137KB
                        • SHA256 881cbabb2232b021bc6d9cf2355e496143d8dc49ec5e9e1e078417b7282eecbe
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        4B1E8C66852A08EA62C4A382C66D885B6DBCF3EB

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\4B1E8C66852A08EA62C4A382C66D885B6DBCF3EB
                        • Size 520KB
                        • SHA256 2c813e2bc3c28d7f62614ab3f21536c47ddd18cd57c43c52b2aff747f59eb280
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        4E9DED18952677ED3B891E8FBFF770A25479BAEC

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\4E9DED18952677ED3B891E8FBFF770A25479BAEC
                        • Size 42KB
                        • SHA256 84375cdbdeec24d11ba55c141289c858df722ee0f99f6413bf2e5721a3f95eca
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        55AF0E358E29379B4087CF434E99DBFA08060076

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\55AF0E358E29379B4087CF434E99DBFA08060076
                        • Size 1.0MB
                        • SHA256 67c39db7adda99e71fed1ac65fc16cd5e8687261de25ef5174c6e018875abe41
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        5C5E957EDA239910C896C5CA67043B1D070FCFE6

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\5C5E957EDA239910C896C5CA67043B1D070FCFE6
                        • Size 26KB
                        • SHA256 08265b1c1784b7f21345c9168f6196ce976dd701c7b6dc9ca737e006327aa5a9
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        5F740D41DEF4F50FC34CAFEB27B164FABA833878

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\5F740D41DEF4F50FC34CAFEB27B164FABA833878
                        • Size 15KB
                        • SHA256 09f984874fdf8f72309ae312047ddd04f6d593db495dcef83a2acd1830f84a73
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        708FC99502ACD3EC4D47D2BF173CEB0EED678722

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\708FC99502ACD3EC4D47D2BF173CEB0EED678722
                        • Size 106KB
                        • SHA256 349d1c852b135a6ed05eaca8f07cc1337e0cf53c1cb569037fcb24a62079eb17
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        77B7ED71F23947312C30F64B3F1AB8A69CA3C53F

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\77B7ED71F23947312C30F64B3F1AB8A69CA3C53F
                        • Size 58KB
                        • SHA256 03c208214eb049799be2fe227962f7a3fd190eb395c59b7e8b744157e5718379
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        7BC3F9A2A0B261C57BB995D5FA09473BF392EB7D

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\7BC3F9A2A0B261C57BB995D5FA09473BF392EB7D
                        • Size 92KB
                        • SHA256 fdca8bbd78224d0f198470ccf81986691348d0b522bd200ae5a5593027026a56
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        7DB6472E1FAAC42BD77B9F0B0208E94984D96CA0

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\7DB6472E1FAAC42BD77B9F0B0208E94984D96CA0
                        • Size 131KB
                        • SHA256 12871bfbb074124153acc0ea38e3b5bdf719ac8828a470af1b69306ffec0a96e
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        83D0E27FF9A5BB24696E55E322B8B6F9864AC422

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\83D0E27FF9A5BB24696E55E322B8B6F9864AC422
                        • Size 15KB
                        • SHA256 e7be5a50227ebe3547ea5ff765a609a10383a7d65afe663b0adddce6600ddb4d
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        8540EC873F08CBAD5DF5121BD3BABF95624B4A14

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\8540EC873F08CBAD5DF5121BD3BABF95624B4A14
                        • Size 9KB
                        • SHA256 32111b0c9ccd077b6e9af5f154d499e981c21aa7b0be95a7bba34109ffe15ed6
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        86DDBDE5E1EAFC4C588EE71FB531985C95CCC542

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
                        • Size 16KB
                        • SHA256 50baa5e0fd89dd593d9a8cf00315884177e6d6cbb3a7a5c7fac0e4c30c5cc26e
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        936A9812FCD708415F7E9FEA6D2FC0C9270D82BA

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\936A9812FCD708415F7E9FEA6D2FC0C9270D82BA
                        • Size 139KB
                        • SHA256 dd7c20a1efb1571793df91d72d259104fb6ced31ff7a95d4a8250e1c96d05a6f
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        A6A55E6F6FA2873CA89D3035810246881747CBA6

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\A6A55E6F6FA2873CA89D3035810246881747CBA6
                        • Size 43KB
                        • SHA256 8ac5c241178c78b1fb3137715020999042864ef0d7a5f0dfa35c4d6ebda1f27d
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        B6B7EDE60BFE3C120BD8043B4A22BF1F07CEF2A9

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\B6B7EDE60BFE3C120BD8043B4A22BF1F07CEF2A9
                        • Size 166KB
                        • SHA256 1866d918badda8e083bcebef4ede79b3c8efc047e9fd3e0033d43c7a18dda5d5
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        C18B20247A3472120970CC3033FE0D2DFAE1E20B

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\C18B20247A3472120970CC3033FE0D2DFAE1E20B
                        • Size 13KB
                        • SHA256 872a86145f54a815eec594cf3c86a066e64f602b876675d0d3d1c7625efe8ad4
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        C40888B2EB3ED01E9F74EA1110DD2E1BCB9C39A2

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\C40888B2EB3ED01E9F74EA1110DD2E1BCB9C39A2
                        • Size 95KB
                        • SHA256 94e805c119cc0ba1907eeb88c35bdf635d9fe6c6427592c928613c189d20d999
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        C8ACE3971B0B104DC18A7C688EE883556AC480EF

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\C8ACE3971B0B104DC18A7C688EE883556AC480EF
                        • Size 72KB
                        • SHA256 bd830e09630075941528a728929827c4fca92c84fa50f9a2d2976d5d7604c8a7
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        DEAF2C6250636FCBE5290066390F81BA8274A759

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\DEAF2C6250636FCBE5290066390F81BA8274A759
                        • Size 81KB
                        • SHA256 d7264ec61f1275e720f48f5e513b33ef2046efdeeb8701d459a606040c4cc2fc
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        EDD394EAFA84F0DDFC080D3DF4198946E6DB4F19

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\cache2\entries\EDD394EAFA84F0DDFC080D3DF4198946E6DB4F19
                        • Size 27KB
                        • SHA256 46c084daa62c33e0c6248d847b9dc13aa9ddc29fa14bf48163056f6fe88413c0
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_arts_and_entertainment.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
                        • Size 67KB
                        • SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_autos_and_vehicles.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
                        • Size 44KB
                        • SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_beauty_and_fitness.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
                        • Size 33KB
                        • SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_blogging_resources_and_services.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
                        • Size 33KB
                        • SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_books_and_literature.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
                        • Size 67KB
                        • SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_business_and_industrial.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
                        • Size 45KB
                        • SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_computers_and_electronics.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
                        • Size 45KB
                        • SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_finance.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_finance.json
                        • Size 33KB
                        • SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_food_and_drink.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
                        • Size 67KB
                        • SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_games.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_games.json
                        • Size 44KB
                        • SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_health.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_health.json
                        • Size 33KB
                        • SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_hobbies_and_leisure.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
                        • Size 67KB
                        • SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_home_and_garden.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
                        • Size 33KB
                        • SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_internet_and_telecom.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
                        • Size 67KB
                        • SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_jobs_and_education.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
                        • Size 33KB
                        • SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_law_and_government.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
                        • Size 68KB
                        • SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_online_communities.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_online_communities.json
                        • Size 67KB
                        • SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_people_and_society.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
                        • Size 45KB
                        • SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_pets_and_animals.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
                        • Size 44KB
                        • SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_real_estate.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_real_estate.json
                        • Size 67KB
                        • SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_reference.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_reference.json
                        • Size 56KB
                        • SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_science.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_science.json
                        • Size 56KB
                        • SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_shopping.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_shopping.json
                        • Size 67KB
                        • SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_sports.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_sports.json
                        • Size 56KB
                        • SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nb_model_build_attachment_travel.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\nb_model_build_attachment_travel.json
                        • Size 67KB
                        • SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        recipe_attachment.json

                        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6apqb380.default-release\personality-provider\recipe_attachment.json
                        • Size 1KB
                        • SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
                        • MD5 SHA1 SHA512 TLSH

                        +JXF11109025559357555603.tmp

                        • Path C:\Users\Admin\AppData\Local\Temp\+JXF11109025559357555603.tmp
                        • Size 397KB
                        • SHA256 64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        +JXF13167221346657847323.tmp

                        • Path C:\Users\Admin\AppData\Local\Temp\+JXF13167221346657847323.tmp
                        • Size 398KB
                        • SHA256 1936d24cb0f4ce7006e08c6ef4243d2e42a7b45f2249f8fe54d92f76a317dfd1
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        +JXF6984723389574588228.tmp

                        • Path C:\Users\Admin\AppData\Local\Temp\+JXF6984723389574588228.tmp
                        • Size 405KB
                        • SHA256 0cb1bc1335372d9e3a0cf6f5311c7cce87af90d2a777fdeec18be605a2a70bc1
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        caa27578-7a53-44d8-817e-a8c01513ca90.zip

                        • Path C:\Users\Admin\AppData\Local\Temp\caa27578-7a53-44d8-817e-a8c01513ca90.zip
                        • Size 3.8MB
                        • SHA256 df4a1cd562eef86e117e9a79497f799c3bb82d7a1c5ac8d9c240abf8640ff159
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        flatlaf-windows-x86_64-8617555990500.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86_64-8617555990500.dll
                        • Size 33KB
                        • SHA256 390ed515d10c94bb91e30012d4ef5545f9ebf5fc20c5c5c9c28b8ea16bf4af60
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        _is7z.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\_isetup\_is7z.dll
                        • Size 971KB
                        • SHA256 f97cda058bfe97a7e9ced5cde7018bbc26e35155c3c7405c6146808f8d06806d
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        _isdecmp.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\_isetup\_isdecmp.dll
                        • Size 28KB
                        • SHA256 8287d0e287a66ee78537c8d1d98e426562b95c50f569b92cea9ce36a9fa57e64
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        javafx-0.jar.sha1

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\javafx-0.jar.sha1
                        • Size 40B
                        • SHA256 a1f58b506c61eb64f9d38183fa7002a7fd5f7dbecb1f3bd16d1c5a7f181df050
                        • MD5 SHA1 SHA512

                        javafx-1.jar

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\javafx-1.jar
                        • Size 5.7MB
                        • SHA256 6f8dde0282b96c215f1d1b7638c78031ddfd970e6e7f8d6834a723ebf85be6ae
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        javafx-1.jar.sha1

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\javafx-1.jar.sha1
                        • Size 40B
                        • SHA256 d8e035498ba5918acb7899067177fdefb3300d7690419ec6b564e49902ab0160
                        • MD5 SHA1 SHA512

                        javafx-2.jar

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\javafx-2.jar
                        • Size 2.5MB
                        • SHA256 0ab89fa8531f5d6f1a15b6c76cf5a7d44e60e273932ad282b29b8dd324e725ff
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        javafx-2.jar.sha1

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\javafx-2.jar.sha1
                        • Size 40B
                        • SHA256 d147881dc89769b2b4c524d01a1e498aa228eca808f18755a5f1ea1742b00546
                        • MD5 SHA1 SHA512

                        javafx-3.jar

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\javafx-3.jar
                        • Size 1.1MB
                        • SHA256 6828f4fd83ac7caeb7e25c21e4050606d384baebb18bc3b1f35cd866020757cc
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        javafx-3.jar.sha1

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\javafx-3.jar.sha1
                        • Size 40B
                        • SHA256 16309d1718c54dc502e50a4918fdfd0b24ddfaba28ba35bca30c89d42fab437c
                        • MD5 SHA1 SHA512

                        javafx-4.jar

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\javafx-4.jar
                        • Size 88KB
                        • SHA256 0dc9f29e41cf9be601990c270f84b2f6655e4d95ebb27ccc9cb0953be50d1229
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        javafx-4.jar.sha1

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\javafx-4.jar.sha1
                        • Size 40B
                        • SHA256 c3473edda477b297e19bdbbdfe306c1475d93addb21b80f923ddce3fe822556b
                        • MD5 SHA1 SHA512

                        javafx-5.jar

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\javafx-5.jar
                        • Size 30.5MB
                        • SHA256 5f3fb26455c8d8d61f6b1080483234cf8b2cc1b8e44f5e9e50ecc176d2a064e1
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        javafx-5.jar.sha1

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\javafx-5.jar.sha1
                        • Size 40B
                        • SHA256 b52f2348ae1c287ea01956214bf5b74a0ae4aa1d96fd5992e35848194b85aaf0
                        • MD5 SHA1 SHA512

                        is-JUP833RMXH.tmp

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\jdk-21.0.9+10-jre\conf\security\policy\unlimited\is-JUP833RMXH.tmp
                        • Size 146B
                        • SHA256 758b930a526fc670ab7537f8c26321527050a31f5f42149a2dda623c56a0a1a9
                        • MD5 SHA1 SHA512 TLSH

                        is-GDQKFIEFJ6.tmp

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\jdk-21.0.9+10-jre\legal\java.datatransfer\is-GDQKFIEFJ6.tmp
                        • Size 33B
                        • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
                        • MD5 SHA1 SHA512

                        is-I7ZCSYI5L9.tmp

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\jdk-21.0.9+10-jre\legal\java.datatransfer\is-I7ZCSYI5L9.tmp
                        • Size 44B
                        • SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
                        • MD5 SHA1 SHA512

                        is-JTBAC9XESE.tmp

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\jdk-21.0.9+10-jre\legal\java.datatransfer\is-JTBAC9XESE.tmp
                        • Size 49B
                        • SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
                        • MD5 SHA1 SHA512

                        jre.zip

                        • Path C:\Users\Admin\AppData\Local\Temp\is-EAJQW4TDM0.tmp\jre.zip
                        • Size 46.7MB
                        • SHA256 39c5e23f3ce4d420663afba8ffde28034b72e2b3e240943dc2321bc1f912eef9
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        SKlauncher-3.2.18_Setup.tmp

                        • Path C:\Users\Admin\AppData\Local\Temp\is-IYDNL2OPDG.tmp\SKlauncher-3.2.18_Setup.tmp
                        • Size 3.5MB
                        • SHA256 942c7f45e3ee02dae9acc679d028a7a0322d28107dbd06750e803a9e35a019dd
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        remote-settings-startup-bundle-

                        • Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
                        • Size 570KB
                        • SHA256 8f7c83d2fa823237898eb310892d4d6aafadc20d5f320a90c1b5f62faa10b967
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        tmpaddon

                        • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                        • Size 11KB
                        • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        tmpaddon

                        • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                        • Size 502KB
                        • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        javafx-base-22.0.2-win.jar

                        • Path C:\Users\Admin\AppData\Roaming\.minecraft\sklauncher\javafx\javafx-base-22.0.2-win.jar
                        • Size 739KB
                        • SHA256 17154354881d15014510b55361999931240f03e247023409171b83286d605776
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        6824f4a902c78fbd.customDestinations-ms

                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                        • Size 18KB
                        • SHA256 8f3dad3fb155ce27a7bfa087e3f53900912f4a1f2ad2b9d3347b1b9a6a373e40
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        6824f4a902c78fbd.customDestinations-ms

                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                        • Size 18KB
                        • SHA256 259a6ada4fa7783a6cd11f99c2cb516717743cedf556efc6a0d9cf90df144297
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        AlternateServices.bin

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\AlternateServices.bin
                        • Size 10KB
                        • SHA256 44f8c9b8ab2bc0a90bac8a1d3a0f0316cf8c9f70780e467065bae8730e240e71
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        AlternateServices.bin

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\AlternateServices.bin
                        • Size 23KB
                        • SHA256 5a6c06918e9218042bde02101bbc1d9b87ce4164e97bc7e518b81296b9f3492c
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        AlternateServices.bin

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\AlternateServices.bin
                        • Size 23KB
                        • SHA256 c5c516b91f9d9205d5b3df3b803bfa1b80add64de9081a11660fb04035de6a69
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        AlternateServices.bin

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\AlternateServices.bin
                        • Size 23KB
                        • SHA256 a41a8ba45b9520ac4db227e657cf58b8d98f50e14470fb7349f2b1e18d1e1da6
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        AlternateServices.bin

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\AlternateServices.bin
                        • Size 23KB
                        • SHA256 e6e6c6d9cf7bfb76805494c825878d01a3e0d86a1216468e3d2af1a4f6aab769
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        AlternateServices.bin

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\AlternateServices.bin
                        • Size 62KB
                        • SHA256 b04d59f05bc74416be087ec1ba1af28eec6aeeaa6bd29a5a49248d92f73cbd65
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        addonStartup.json.lz4

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\addonStartup.json.lz4
                        • Size 4KB
                        • SHA256 9c543847839be8ef200d4dca1314057874614ab85e4e2e102434c2c3e3ab064e
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        data.safe.tmp

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
                        • Size 3KB
                        • SHA256 1e0c7c71f665170c2dcc60a1f8cb7ca8fb704a273595e92873cadb2e5d448c7f
                        • MD5 SHA1 SHA512 TLSH

                        data.safe.tmp

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
                        • Size 6KB
                        • SHA256 b727e42c88c3cda97b823b478091d87877f03846e5c277c4bb729c4d676f6876
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        data.safe.tmp

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
                        • Size 92KB
                        • SHA256 b615f9ce7d0bcfa9f273fcba5eec8e3db79cca65cd221619a1540f7bda39acdd
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        data.safe.tmp

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
                        • Size 63KB
                        • SHA256 23bee09d3b0eef70e1bcb1a5225204b2cca1fc5d4269ef25e338a8546adf116f
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        data.safe.tmp

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
                        • Size 63KB
                        • SHA256 bb7c1d7fa533a02452586fe360b9dc22ed12000e46b2a4c9744a8971141d32eb
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        data.safe.tmp

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
                        • Size 34KB
                        • SHA256 ceaad74efede7fdc91305b3b0229c593c25a38920d6c7b9769f289ef1777e152
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        events

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\events\events
                        • Size 5KB
                        • SHA256 7ace1c44aa4d93b2797d9229681341ac02464da5c53ecf455bc240d2699b47cf
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        076cebe1-a615-4a74-8d7f-f163fe62acb5

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\076cebe1-a615-4a74-8d7f-f163fe62acb5
                        • Size 886B
                        • SHA256 b366dfcb889eb007915c4677b67d5e46818ec4d0c363414c04c4f5ed6039502a
                        • MD5 SHA1 SHA512 TLSH

                        0897b9cc-2c94-411a-aaf8-fb7fb2d166b0

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\0897b9cc-2c94-411a-aaf8-fb7fb2d166b0
                        • Size 2KB
                        • SHA256 02959d98db59f61970cc8171e6fa3c0cf8c41e9f29b937a9bd112ce839ac1a40
                        • MD5 SHA1 SHA512 TLSH

                        0affe114-216a-4ce4-9f1b-2f35cb8b2208

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\0affe114-216a-4ce4-9f1b-2f35cb8b2208
                        • Size 883B
                        • SHA256 a4dc682bb07d02225bb94e2cbabee73454030f5f7d748b28bfea995b512540f5
                        • MD5 SHA1 SHA512 TLSH

                        2bbcce4e-c8e0-4cc5-bbda-b9d1e158121e

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\2bbcce4e-c8e0-4cc5-bbda-b9d1e158121e
                        • Size 16KB
                        • SHA256 e746a7d4a3d0633788b2ab47594410e294b43dd54b532582fb207e7d0e5344da
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        362e2695-49bc-427e-990e-d413e5bf551d

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\362e2695-49bc-427e-990e-d413e5bf551d
                        • Size 235B
                        • SHA256 f5cede16b8754f94134e68f65a412963bd81f1345e3be948965e632e41981052
                        • MD5 SHA1 SHA512 TLSH

                        ca3a3393-4ef7-4f6c-92e4-e003bf6ab01d

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\ca3a3393-4ef7-4f6c-92e4-e003bf6ab01d
                        • Size 29KB
                        • SHA256 d54277948848d67c908ea18ae7d5cbf621a69162cc60ce26a263f77e50c5d1a4
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        e813b75d-1a0e-4124-a59a-b1208a93c2e4

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\e813b75d-1a0e-4124-a59a-b1208a93c2e4
                        • Size 235B
                        • SHA256 15e933b753af25014fdf9f60a652e7dd820f1b1ee706be7bda780dd0bf32335b
                        • MD5 SHA1 SHA512 TLSH

                        extension-preferences.json

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\extension-preferences.json
                        • Size 942B
                        • SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
                        • MD5 SHA1 SHA512 TLSH

                        extensions.json

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\extensions.json
                        • Size 16KB
                        • SHA256 f85ea7d424528c95c0a5a46172e65d598371d000e1771853e0310e55715f2d4e
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        favicons.sqlite-wal

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\favicons.sqlite-wal
                        • Size 192KB
                        • SHA256 08dd6f2fe40453f8d828cb4cbab638fa04a25b840175a5329a38ab32feffcf67
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        gmpopenh264.dll

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                        • Size 1.1MB
                        • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        gmpopenh264.info

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                        • Size 116B
                        • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                        • MD5 SHA1 SHA512 TLSH

                        manifest.json

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                        • Size 1002B
                        • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                        • MD5 SHA1 SHA512 TLSH

                        widevinecdm.dll

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                        • Size 21.6MB
                        • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        places.sqlite

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\places.sqlite
                        • Size 5.0MB
                        • SHA256 7ceb3d1d40aa176ba3fc9872c55e09077f2b792b3537eafd4ab2c7188ecddc67
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        places.sqlite-wal

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\places.sqlite-wal
                        • Size 192KB
                        • SHA256 23e9a995427cd945351bec57d8f687be083beaeef2f9d86502c42c8035974db5
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        prefs-1.js

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
                        • Size 10KB
                        • SHA256 18fb3d9f35432e9f27a923be5d9e319f22c737731b583494749da2c4886b736b
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        prefs-1.js

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
                        • Size 12KB
                        • SHA256 35e9def21e96d7b3f233fcd105504ae788634f1509aa0b9040243bfdbbfc2e83
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        prefs.js

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs.js
                        • Size 6KB
                        • SHA256 5319ea924a0046dd8258aa51151f67c866d289156936746be92782a6ad3dc9d4
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        prefs.js

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs.js
                        • Size 6KB
                        • SHA256 1ede53c88cc76e368330c2aa250d887a2e1cf43c05aacbede14e6bdf98813990
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        prefs.js

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs.js
                        • Size 7KB
                        • SHA256 2e769637733f926cde03e45ca6598f8cc3e59bcbf840a2d5a252773a8c8de205
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        prefs.js

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs.js
                        • Size 6KB
                        • SHA256 4cb067da0a6e1545712a20d52472bf873e25a4eaea1b0ca82f95bc2efc1b20ef
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        prefs.js

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs.js
                        • Size 8KB
                        • SHA256 84f644489cdc15f40b3932cdc7cd0b6882d86ed3a50e2945bac9ef60cea8e984
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        recovery.baklz4

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
                        • Size 3KB
                        • SHA256 863c42b16ae39b9104ff8f7e8dd94ee13d0ea58829336cf5e3c2bc5df16cca18
                        • MD5 SHA1 SHA512 TLSH

                        recovery.baklz4

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
                        • Size 14KB
                        • SHA256 1bc9ce503fb5c98ec183784739e92db004d955457b0601bb66c628b0f0f173c6
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        recovery.baklz4

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
                        • Size 14KB
                        • SHA256 aba0dec0d491c11a7620a2aeca6f1844af115e5b85ffc00d7220dd8123d8c909
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        recovery.baklz4

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.baklz4
                        • Size 2KB
                        • SHA256 cd9cd44e9051dbbea158cf75811c1972226e5aec40834ed98623fb80a29f5781
                        • MD5 SHA1 SHA512 TLSH

                        recovery.jsonlz4

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\sessionstore-backups\recovery.jsonlz4
                        • Size 890B
                        • SHA256 54a3ed31c21740107fea710d13795e465e482a748ec8e754c22b02d857d455f4
                        • MD5 SHA1 SHA512 TLSH

                        {cadf5b5b-1939-42d1-817d-664ca440662e}.final

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\storage\default\https+++www.youtube.com^partitionKey=%28https%2Cgoogle.com%29\cache\morgue\46\{cadf5b5b-1939-42d1-817d-664ca440662e}.final
                        • Size 404B
                        • SHA256 ba3629c199956f51e9256ed5da1375954a0197263210e8f39a4e002329b71af0
                        • MD5 SHA1 SHA512 TLSH

                        1657114595AmcateirvtiSty.sqlite

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
                        • Size 48KB
                        • SHA256 7c0f4d3e90c32659d00a5a2df1a83279ba1ae91a9e103d72dbca46b4b396013f
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        3870112724rsegmnoittet-es.sqlite

                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                        • Size 12.4MB
                        • SHA256 a3f4c35433a2dc0e667bf7838e1e79815d0a83cb3d67a553c1014f9d8f11939d
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        SKlauncher.jar

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\SKlauncher.jar
                        • Size 1.3MB
                        • SHA256 25a73e3770a1d8d14bce53e8920e2e893aacc3c715d0fb22f878ef2090d03863
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        awt.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\awt.dll
                        • Size 1.4MB
                        • SHA256 642e0b8de39f2b70413b49d174a9774fbbcbdf765f17cbe3296feb3d5dedc4d2
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        extnet.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\extnet.dll
                        • Size 24KB
                        • SHA256 6015feeb6aee8d2ad4fac6ba8ada3e1653cdb2357f8eb0c1e12d790e8d8addf0
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        fontmanager.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\fontmanager.dll
                        • Size 951KB
                        • SHA256 01b624496ee5327619396956684969351c38ce561e83d94a546dcda5dfe41b1d
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        freetype.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\freetype.dll
                        • Size 534KB
                        • SHA256 d1c08aed42d33586f81798aeadffa99df3d861e56a59aa2ec8e1ad3259d1fd9f
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        java.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\java.dll
                        • Size 119KB
                        • SHA256 f030ef889dad43f583def1c434571867de353eb9507332de4d9cc2623fcd101d
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        javaw.exe

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe
                        • Size 49KB
                        • SHA256 431ca133540a434d297b5ae9a1be3fcd4575e51f0f6d3ffef5523a7c9173421a
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        jimage.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\jimage.dll
                        • Size 33KB
                        • SHA256 958192bdcee9b793b2444ae9ab93f1ca77b6bcaee30f7a4f8f948fb24f9cecfa
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        jli.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\jli.dll
                        • Size 87KB
                        • SHA256 750d51aa711739d0b15eb608608120a2cd0612bcc91af4ecd5d68315bb029f82
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        jsvml.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\jsvml.dll
                        • Size 849KB
                        • SHA256 4dcee347f735298e7f074f5ebcf156674cc8bbbcb5264ba97fca8b3a74a2048a
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        msvcp140.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\msvcp140.dll
                        • Size 561KB
                        • SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        net.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\net.dll
                        • Size 58KB
                        • SHA256 26ac128da4611938741ba57ad51329654303e3066769006c2ff7cb8603013f39
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        nio.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\nio.dll
                        • Size 78KB
                        • SHA256 36cb33e5effa7290e846059d7aadf782ba6a8f23cc6b7e35c6204240a361b081
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        classes.jsa

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\server\classes.jsa
                        • Size 11.9MB
                        • SHA256 15be0146ca098aef2074dab87a55ca0c485625d72262b7577f50ee48f12a2437
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        jvm.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\server\jvm.dll
                        • Size 13.3MB
                        • SHA256 5ae80bddba5165c67ee075212f858a3955fd04fa9dd629b5303ad054a8aab74a
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        sunmscapi.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\sunmscapi.dll
                        • Size 47KB
                        • SHA256 f8f1637dd438c0cc81d68b934b406ee07bae2e4840f8c3cb937223aa246386c2
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        vcruntime140.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\vcruntime140.dll
                        • Size 117KB
                        • SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        vcruntime140_1.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\vcruntime140_1.dll
                        • Size 48KB
                        • SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        zip.dll

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\zip.dll
                        • Size 87KB
                        • SHA256 6009721e1a23a8aaf79f8f9ef36c298bce3311b1b969c2982a2a5691c3ccfe43
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        net.properties

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\conf\net.properties
                        • Size 7KB
                        • SHA256 56dd1f6095c189c1052f6baa32e457efc09de4832e19cdb82bb236dc8abfee9f
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        java.security

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\conf\security\java.security
                        • Size 65KB
                        • SHA256 c34c3504e41af63639661aedf8d0864d8157df0980dc4c22d014a7170c5897e1
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        default_local.policy

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\conf\security\policy\unlimited\default_local.policy
                        • Size 193B
                        • SHA256 8d8a318e6d90dfd7e26612d2b6385aa704f686ca6134c551f8928418d92b851a
                        • MD5 SHA1 SHA512 TLSH

                        fontconfig.bfc

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\fontconfig.bfc
                        • Size 4KB
                        • SHA256 c7e2e76b908cb6330823e698889943c162e9861a4575501cbb59c9b830158ab0
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        jvm.cfg

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\jvm.cfg
                        • Size 29B
                        • SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
                        • MD5 SHA1 SHA512

                        blocked.certs

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\security\blocked.certs
                        • Size 2KB
                        • SHA256 583500b76965eb54b03493372989ab4d3426f85462d1db232c5ae6706a4d6c58
                        • MD5 SHA1 SHA512 TLSH

                        cacerts

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\security\cacerts
                        • Size 185KB
                        • SHA256 7a33aaf51d8460f3e57956e90a8fe179188e9c82578555020881f5cd48c4274b
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        tzdb.dat

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\tzdb.dat
                        • Size 100KB
                        • SHA256 7be2a3adf10ff841579629f7725b15f0db41e8856527ec72847b5477073a3d29
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        tzmappings

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\lib\tzmappings
                        • Size 21KB
                        • SHA256 b41575b332809b37ad423bdca30c7c48cdef3d82f82fa9d534781a6f15d6a2ab
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        release

                        • Path C:\Users\Admin\AppData\Roaming\sklauncher\jre\release
                        • Size 1KB
                        • SHA256 9c43a644e7ccb69ca9c3024f55175b068f66cfab914e2487e74bbefbe2a8833c
                        • MD5 SHA1 SHA512 TLSH

                        memory/1100-352-0x00000000002D0000-0x0000000000668000-memory.dmp

                        memory/1100-22-0x00000000002D0000-0x0000000000668000-memory.dmp

                        memory/1100-8-0x00000000002D0000-0x0000000000668000-memory.dmp

                        memory/1100-32-0x00000000002D0000-0x0000000000668000-memory.dmp

                        memory/1100-1724-0x00000000002D0000-0x0000000000668000-memory.dmp

                        memory/1100-21-0x00000000002D0000-0x0000000000668000-memory.dmp

                        memory/1100-26-0x00000000002D0000-0x0000000000668000-memory.dmp

                        memory/1100-7-0x00000000005FD000-0x00000000005FF000-memory.dmp

                        memory/1100-8644-0x00000000002D0000-0x0000000000668000-memory.dmp

                        memory/1100-1613-0x00000000002D0000-0x0000000000668000-memory.dmp

                        memory/2736-1-0x0000000000900000-0x00000000009DD000-memory.dmp

                        memory/2736-0-0x00000000009BD000-0x00000000009BE000-memory.dmp

                        memory/2736-20-0x0000000000900000-0x00000000009DD000-memory.dmp

                        memory/2736-8649-0x0000000000900000-0x00000000009DD000-memory.dmp

                        memory/7656-8625-0x0000028EB6C40000-0x0000028EB6EB0000-memory.dmp

                        memory/7656-8803-0x0000028EAF710000-0x0000028EAF980000-memory.dmp

                        memory/7656-8982-0x0000028EB71D0000-0x0000028EB7440000-memory.dmp

                        memory/7656-8760-0x0000028EB6C40000-0x0000028EB6EB0000-memory.dmp

                        memory/7656-8645-0x0000028EB71D0000-0x0000028EB7440000-memory.dmp

                        memory/7656-8637-0x0000028EAF710000-0x0000028EAF980000-memory.dmp